QiFeng.ZWY.MagWeb/Filter/AuthorizationAttribute.cs

这里只显示每个文件的开头 60 行。登录后可以解锁完整代码。

微信扫码关注公众号，代码整理好后第一时间通知你。

using System;
using System.Configuration;
using System.Web;
using System.Web.Mvc;

namespace QiFeng.LMSD.MagWeb
{
    /// <summary>
    ///     用户登录验证
    ///     <para>如果不需要处理用户登录，则请指定AllowAnonymousAttribute属性</para>
    /// </summary>
    [AttributeUsage(AttributeTargets.Method | AttributeTargets.Class, Inherited = true, AllowMultiple = true)]
    public class AuthorizationAttribute : FilterAttribute, IAuthorizationFilter
    {
        /// <summary>
        ///     处理用户登录
        /// </summary>
        public void OnAuthorization(AuthorizationContext filterContext)
        {
            if (filterContext.HttpContext == null)
            {
                throw new Exception("此特性只适合于Web应用程序使用！");
            }
            string authSaveType = ConfigurationManager.AppSettings["AuthSaveType"] ?? "Cookie";
            string userUrl = ConfigurationManager.AppSettings["AuthUserUrl"];
            switch (authSaveType.ToUpper())
            {
                case "SESSION":
                    if (filterContext.HttpContext.Session == null)
                    {
                        throw new Exception("服务器Session不可用！");
                    }
                    if (!filterContext.ActionDescriptor.IsDefined(typeof (AllowAnonymousAttribute), true)
                        &&
                        !filterContext.ActionDescriptor.ControllerDescriptor.IsDefined(
                            typeof (AllowAnonymousAttribute), true))
                    {
                        if (filterContext.HttpContext.Session["McAccounts"] == null)
                        {
                            string url = string.Empty;
                            try
                            {
                                url = HttpContext.Current.Request.Url.ToString();
                            }
                            catch
                            {
                            }
                            filterContext.Result = new RedirectResult(userUrl + "?returnurl=" + url);
                        }
                    }
                    break;
                case "COOKIE":
                    if (!filterContext.ActionDescriptor.IsDefined(typeof (AllowAnonymousAttribute), true)
                        &&
                        !filterContext.ActionDescriptor.ControllerDescriptor.IsDefined(
                            typeof (AllowAnonymousAttribute), true))
                    {
                        if (filterContext.HttpContext.Request.Cookies["McAccounts"] == null)
                        {
                            string url = string.Empty;