xoohoo认证模块

最新推荐文章于 2020-03-09 19:00:00 发布

weixin_30675967

最新推荐文章于 2020-03-09 19:00:00 发布

阅读量164

点赞数

CC 4.0 BY-SA版权

原文链接：http://www.cnblogs.com/linfenglee/archive/2011/08/23/2150541.html

首先在XoohooApplication 运行 // 加载引导程序 Load(new HttpContextWrapper(Context)); 会把所有的模块都加载了。例如加载AdminModule的时候会去注册他的认证模块RegisterFilters

#region Filter注册示例
/*

            //AdminController的SignIn Action
            ControllerActionFilterCriteria criteria1 = new ControllerActionFilterCriteria();【执行的条件】
            criteria1.AddMethod<AdminController>(s => s.SignIn());【在这个控制器执行之前】
            filterProvider.Add(new[] { criteria1 }, new Filter(new TimerActionFilter(), FilterScope.First, Int32.MinValue));【执行的方法和顺序】

当然执行的方法有几种

            //12大组合权限判断
            //Controller -> AuthorizationFilter
            //Controller -> AdvancedAuthorizationFilter
            //Controller -> RouteAuthorizationFilter
            //Action -> AuthorizationFilter
            //Action -> AdvancedAuthorizationFilter
            //Action -> RouteAuthorizationFilter
            //Route -> AuthorizationFilter
            //Route -> AdvancedAuthorizationFilter
            //Route -> RouteAuthorizationFilter
            //RouteValue -> AuthorizationFilter
            //RouteValue -> AdvancedAuthorizationFilter
            //RouteValue -> RouteAuthorizationFilter

           以ControllerActionFilterCriteria adminSubMenuCriteria = new ControllerActionFilterCriteria();
            adminSubMenuCriteria.AddMethod<AdminController>(s => s.SubMenu());
            filterRegistry.Add(new[] { adminSubMenuCriteria }, new AdvancedAuthorizationFilter(DependencyInjector, user => user.HasPermission("后台管理")));这个为例子

AdvancedAuthorizationFilter方法传入的是当前的依赖容器，和用户信息

注册完毕以后在XoohooApplication执行Application_AcquireRequestState的时候

            //获取所定义路由匹配的 HTTP 请求的相关信息【就是要调用的aciton属于哪个路由】
            RequestContext requestContext = handler.RequestContext;
            if (requestContext == null) return;

【通过路由就能知道当前是在哪个模块，并获取该模块的验证模块名】
　　　　 //当前模块的认证模块
IAuthenticationModule authenticationModule = modulesLoaded.GetAuthenticationModule(requestContext.RouteData.DataTokens["ModuleName"] as string);

【获取了模块验证名以后就会去执行AdvancedAuthorizationFilter类里面的OnAuthorization方法】

看 InvokeAction方法【所以说是先执行AdvancedAuthorizationFilter，再执行ActionFilter】

FilterInfo filters = this.GetFilters(controllerContext, actionDescriptor);
    try
    {
        AuthorizationContext context = this.InvokeAuthorizationFilters(controllerContext, filters.AuthorizationFilters, actionDescriptor);
        if (context.Result != null)
        {
            this.InvokeActionResult(controllerContext, context.Result);
        }
        else
        {
            if (controllerContext.Controller.ValidateRequest)
            {
                ValidateRequest(controllerContext);
            }
            IDictionary<string, object> parameterValues = this.GetParameterValues(controllerContext, actionDescriptor);
            ActionExecutedContext context2 = this.InvokeActionMethodWithFilters(controllerContext, filters.ActionFilters, actionDescriptor, parameterValues);
            this.InvokeActionResultWithFilters(controllerContext, filters.ResultFilters, context2.Result);
        }
    }
    catch (ThreadAbortException)
    {
        throw;
    }

【在执行 AdvancedAuthorizationFilter的OnAuthorization的时候就吧是否合法登录的用户验证了】

public void OnAuthorization(AuthorizationContext filterContext)
        {
            //当前用户
            IUser user = _dependencyResolver.GetService<IUser>();

            // 如果用户尚未登录，或者没有通过验证
            if (user == null || !user.IsAuthenticated || !_checkUser(user))
            {
                //当前模块的认证模块
                IAuthenticationModule authenticationModule = _dependencyResolver.GetService<IAuthenticationModule>();
                if (authenticationModule == null)
                    throw new System.Exception("AuthenticationModule of current module is null.");
                string signInUrl = authenticationModule.GetSignInUrl(filterContext.RequestContext);
                filterContext.SetActionResult(signInUrl);
            }

}

【 string signInUrl = authenticationModule.GetSignInUrl(filterContext.RequestContext);这个方法是每个模块都有的。这样就实现了多站模块登录，在大型的系统里面，如果又新增加一个代理平台，有不同的登录地址，重新做个认证模块就可以了】

转载于:https://www.cnblogs.com/linfenglee/archive/2011/08/23/2150541.html