Passport/UserLogin.aspx.cs

这里只显示每个文件的开头 60 行。登录后可以解锁完整代码。

微信扫码关注公众号，代码整理好后第一时间通知你。

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using SSO.Passport.Class;

namespace SSO.Passport
{
    /// <summary>
    /// 用户登录
    /// 接收Get参数：BackURL
    /// </summary>
    public partial class UserLogin : System.Web.UI.Page
    {
        protected void Page_Load(object sender, EventArgs e)
        {
            if (!IsPostBack)
            {
                if (Request.QueryString["backurl"] == null)
                    Response.Write("请求参数有误，请从分站进行登录，勿直接访问该页面！");
            }
        }

        protected void btnSubmit_Click(object sender, EventArgs e)
        {
            //摸拟用户登录验证(帐号、密码于web.config中)
            //真实环境此处应通过数据库进行验证
            if (this.txtAccount.Text.Trim() == System.Configuration.ConfigurationManager.AppSettings["Account"] && 
                this.txtPassport.Text.Trim() == System.Configuration.ConfigurationManager.AppSettings["Password"])
            {
                string tokenValue = Guid.NewGuid().ToString().ToUpper();

                //产生主站凭证
                object cert = true;
                CacheManager.TokenInsert(
                    tokenValue,
                    cert,
                    DateTime.Now.AddMinutes(double.Parse(System.Configuration.ConfigurationManager.AppSettings["Timeout"])));

                //产生令牌
                HttpCookie tokenCookie = new HttpCookie("Passport.Token");
                tokenCookie.Domain = "passport.com";
                //可使用自定义算法避免Cookie非法复制
                //tokenCookie.Values.Add("Key", "加密算法");
                tokenCookie.Values.Add("Value", tokenValue);
                Response.AppendCookie(tokenCookie); 

                //跳转回分站
                if (Request.QueryString["backurl"] != null)
                    Response.Redirect(Server.UrlDecode(Request.QueryString["backurl"]));
            }
            else
            {
                Response.Write("抱歉，帐号或密码有误！请在Web.config中配置帐号密码！");