105 lines
4.1 KiB
C#
105 lines
4.1 KiB
C#
|
using System;
|
|||
|
|
using System.Linq;
|
|||
|
|
using System.Net;
|
|||
|
|
using System.Net.Http;
|
|||
|
|
using System.Web.Http;
|
|||
|
|
using System.Web.Http.Controllers;
|
|||
|
|
using System.Web.Http.Filters;
|
|||
|
|
using System.Web.Security;
|
|||
|
|
using LDX.BaseData.Domain.IServices;
|
|||
|
|
using LDX.Core;
|
|||
|
|
using LDX.Core.Caching;
|
|||
|
|
using LDX.MES.Domain.IServices.FM;
|
|||
|
|
|
|||
|
|
namespace LDX.WebApi
|
|||
|
|
{
|
|||
|
|
/// <summary>
|
|||
|
|
/// 指定用于验证请求的 System.Security.Principal.IPrincipal 的Api授权筛选器。
|
|||
|
|
/// </summary>
|
|||
|
|
public class ApiAuthorizeAttribute : System.Web.Http.AuthorizeAttribute, IOverrideFilter
|
|||
|
|
{
|
|||
|
|
/// <summary>
|
|||
|
|
/// 是否需要登录
|
|||
|
|
/// </summary>
|
|||
|
|
public bool NeedLogin { get; set; }
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
/// 为操作授权时调用。
|
|||
|
|
/// </summary>
|
|||
|
|
/// <param name="actionContext">上下文。</param>
|
|||
|
|
public override void OnAuthorization(HttpActionContext actionContext)
|
|||
|
|
{
|
|||
|
|
base.OnAuthorization(actionContext);
|
|||
|
|
//var authorization = actionContext.Request.Headers.Authorization;
|
|||
|
|
//if ((authorization != null) && (authorization.Parameter != null))
|
|||
|
|
//{
|
|||
|
|
// //解密用户ticket,并校验用户名密码是否匹配
|
|||
|
|
// var encryptTicket = authorization.Parameter;
|
|||
|
|
// if (ValidateTicket(encryptTicket))
|
|||
|
|
// {
|
|||
|
|
|
|||
|
|
// base.IsAuthorized(actionContext);
|
|||
|
|
// }
|
|||
|
|
// else
|
|||
|
|
// {
|
|||
|
|
// HandleUnauthorizedRequest(actionContext);
|
|||
|
|
// }
|
|||
|
|
//}
|
|||
|
|
////如果取不到身份验证信息，并且不允许匿名访问，则返回未验证401
|
|||
|
|
//else
|
|||
|
|
//{
|
|||
|
|
// var attributes = actionContext.ActionDescriptor.GetCustomAttributes<AllowAnonymousAttribute>().OfType<AllowAnonymousAttribute>();
|
|||
|
|
// bool isAnonymous = attributes.Any(a => a is AllowAnonymousAttribute);
|
|||
|
|
// if (isAnonymous) base.OnAuthorization(actionContext);
|
|||
|
|
// else HandleUnauthorizedRequest(actionContext);
|
|||
|
|
//}
|
|||
|
|
}
|
|||
|
|
//校验用户名密码（正式环境中应该是数据库校验）
|
|||
|
|
private bool ValidateTicket(string encryptTicket)
|
|||
|
|
{
|
|||
|
|
var token= FormsAuthentication.Decrypt(encryptTicket);
|
|||
|
|
if(token.Expired)
|
|||
|
|
throw new Exception("令牌已过期");
|
|||
|
|
//解密Ticket
|
|||
|
|
var strTicket = token.UserData;
|
|||
|
|
//从Ticket里面获取用户名和密码
|
|||
|
|
//var index = strTicket.IndexOf("&");
|
|||
|
|
//var strUser = new Guid(strTicket.Substring(0, index));
|
|||
|
|
//string strPwd = strTicket.Substring(index + 1);
|
|||
|
|
var strArray = strTicket.Split('&');
|
|||
|
|
if (strArray.Length != 3)
|
|||
|
|
throw new Exception("令牌参数数量不正确!");
|
|||
|
|
var strUser = new Guid(strArray[0]);
|
|||
|
|
string strPwd = strArray[1];
|
|||
|
|
string type = strArray[2];
|
|||
|
|
ServiceLocator locator = ServiceLocator.Instance;
|
|||
|
|
var userService = locator.GetService<IFMUserService>();
|
|||
|
|
//var platformService = locator.GetService<IPlatformUserService>();
|
|||
|
|
if (type == "0")
|
|||
|
|
{
|
|||
|
|
var user = userService.Get(i => i.ID == strUser && i.PASSWORD == strPwd);
|
|||
|
|
return user == null ? false : true;
|
|||
|
|
}
|
|||
|
|
else {
|
|||
|
|
//var platformServiceInfo = platformService.Get(i => i.ID == strUser && i.PASSWORD == strPwd);
|
|||
|
|
//return platformServiceInfo == null ? false : true;
|
|||
|
|
return false;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private static bool SkipAuthorization(HttpActionContext actionContext)
|
|||
|
|
{
|
|||
|
|
return actionContext.ActionDescriptor.GetCustomAttributes<AllowAnonymousAttribute>().Any<AllowAnonymousAttribute>()
|
|||
|
|
|| actionContext.ControllerContext.ControllerDescriptor.GetCustomAttributes<AllowAnonymousAttribute>().Any<AllowAnonymousAttribute>();
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
#region IOverrideFilter 成员
|
|||
|
|
|
|||
|
|
public Type FiltersToOverride
|
|||
|
|
{
|
|||
|
|
get { return typeof(IAuthorizationFilter); }
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
#endregion
|
|||
|
|
}
|
|||
|
|
}
|