AuthorizeAttribute

最新推荐文章于 2022-03-31 09:33:51 发布

fer_ba

最新推荐文章于 2022-03-31 09:33:51 发布

阅读量1.4k

点赞数

CC 4.0 BY-SA版权

本文链接：https://blog.youkuaiyun.com/fer_ba/article/details/28235505

本文介绍了一个自定义的用户授权类UserAuthorize，该类继承自AuthorizeAttribute并重写了OnAuthorization和AuthorizeCore方法，用于实现对用户的权限验证。当未通过验证时，用户将被重定向到登录页面，并携带返回URL参数。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.Mvc;
using System.Web.Security;

namespace pdf2word.Areas.User
{
public class UserAuthorize : AuthorizeAttribute
{
public override void OnAuthorization(AuthorizationContext filterContext)
{
base.OnAuthorization(filterContext);
if (filterContext.Result is HttpUnauthorizedResult)
{
filterContext.Result = new RedirectResult(
string.Concat("/user/Account/Login", "?ReturnUrl=", filterContext.HttpContext.Server.UrlEncode(filterContext.HttpContext.Request.Url.ToString())));
}
}

private bool CookieIsValid(HttpCookie cookie)
{
if (cookie == null) return false;

try
{
FormsAuthenticationTicket ticketback = FormsAuthentication.Decrypt(cookie.Value);
if (String.IsNullOrEmpty(ticketback.Name))
return false;
else
return true;
}
catch
{
return false;
}
}

protected override bool AuthorizeCore(HttpContextBase httpContext)
{
if (httpContext == null)
return false;

if (CookieIsValid(httpContext.Request.Cookies["cokiename"]))
return true;
else
{
httpContext.Response.StatusCode = 403;
return false;
}
}
}
}