.net MVC中使用forms驗證,供大家參考,具體內容如下
文件夾的分部是這樣子的
首先在Web.config中設置
authentication和authorization 節點
1
2
3
4
5
6
7
8
9
10
11
12
13
14
|
< system.web > < authentication mode = "Forms" > < forms loginUrl = "~/Login/Index" timeout = "2880" defaultUrl = "~/Home/Index" /> </ authentication > < anonymousIdentification enabled = "true" /> < authorization > < deny users = "?" /> <!--拒絕匿名訪問--> </ authorization > < compilation debug = "true" targetFramework = "4.5" /> < httpRuntime targetFramework = "4.5" /> < httpModules > < add name = "ApplicationInsightsWebTracking" type = "Microsoft.ApplicationInsights.Web.ApplicationInsightsHttpModule, Microsoft.AI.Web" /> </ httpModules > </ system.web > |
如果在Login文件夾還有不需要匿名訪問,或者在LoginController中除了登陸還有方法可以匿名訪問,
那么我們需要在加上這一個節點
1
2
3
4
5
6
7
|
<location path= "Login" > <!--這里的意思就是LoginController下的方法可以匿名訪問--> <system.web> <authorization> <allow users= "*" /> <!--允許匿名訪問--> </authorization> </system.web> </location> |
登陸的方法貼出一部分代碼,僅供參考
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
|
public bool ValidateUser(LoginVO model) { string encodePassword = MD5(model.PassWord); //加密 string sql = "select * from User_Users where (UserName=@UserName or JobNumber=@JobNumber) and PassWord=@PassWord" ; var user = Context.Data.Query<UsersPO>(sql, new {UserName = model.LoginName, JobNumber = model.LoginName, PassWord = encodePassword}).SingleOrDefault(); if (user == null ) return false ; DateTime expiration = model.IsRememberLogin //是否記住密碼 ? DateTime.Now.AddDays(14) : DateTime.Now.Add(FormsAuthentication.Timeout); var ticket= new FormsAuthenticationTicket( 1, //指定版本號:可隨意指定 user.UserName, //登錄用戶名:對應 Web.config 中 <allow users="Admin" … /> 的 users 屬性 DateTime.Now, //發布時間 expiration, //失效時間 true , //是否為持久 Cookie user.UserId.ToString(), //用戶數據:可用 ((System.Web.Security.FormsIdentity)(HttpContext.Current.User.Identity)).Ticket.UserData 獲取 FormsAuthentication.FormsCookiePath //指定 Cookie 為 Web.config 中 <forms path="/" … /> path 屬性,不指定則默認為“/” ); var encryptedTicket = FormsAuthentication.Encrypt(ticket); if (HttpContext.Current.Request.Cookies[FormsAuthentication.FormsCookieName] != null ) { HttpContext.Current.Request.Cookies.Remove(FormsAuthentication.FormsCookieName); } var loginIdentify= new HttpCookie(FormsAuthentication.FormsCookieName); if (model.IsRememberLogin) { loginIdentify.Expires = DateTime.Now.AddDays(7); } loginIdentify.Value = encryptedTicket; HttpContext.Current.Response.AppendCookie(loginIdentify); //添加Cookie return true ; } /// <summary> /// 加密 /// </summary> /// <param name="str"></param> /// <param name="encoding"></param> /// <param name="toUpper"></param> /// <param name="isReverse"></param> /// <param name="count"></param> /// <returns></returns> private string MD5( string str, Encoding encoding= null , int count = 1) { if (encoding == null ) { encoding = Encoding.Default; } var bytes = new MD5CryptoServiceProvider().ComputeHash(encoding.GetBytes(str)); var md5 = string .Empty; for ( int i = 0; i < bytes.Length; i++) { md5 += bytes[i].ToString( "x" ).PadLeft(2, '0' ); } if (count <= 1) { return md5; } return MD5(md5, encoding, --count); } |
以上就是本文的全部內容,希望對大家的學習有所幫助,也希望大家多多支持服務器之家。