用户验证之自定义身份验证

这是今天在课堂上演示的例子代码，自定义身份验证的简单做法是通过GenericPrinciple和GenericIdentity实现，也可以通过自定义Principle和Identity实现。

 

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;

using System.Threading;
using System.Security;
using System.Security.Principal;

namespace _03_CustomAuthentication
{
    class Program
    {
        static void Main(string[] args)
        {
            //这里实现自定义验证(GenericPrinciple)

            //要求用户输入用户名和密码
            Console.WriteLine("请输入用户名:");
            string username = Console.ReadLine();
            Console.WriteLine("请输入密码:");
            string password = Console.ReadLine();
            //现在的做法是直接硬编码来做身份验证
            if (AuthenticateUser(username, password))
            {
                Console.WriteLine("欢迎使用:{0}!", username);
                //GenericPrincipal p =(GenericPrincipal)Thread.CurrentPrincipal;
                //Console.WriteLine("当前您是属于管理员:{0}", 
                //    p.IsInRole("Admin"));
                MyPrinciple p = (MyPrinciple)Thread.CurrentPrincipal;
                MyIdentity i = p.Identity as MyIdentity;
                Console.WriteLine("当前您是属于管理员:{0}", 
                    p.IsInRole("Admin"));
                Console.WriteLine("用户的角色列表:");
                foreach (var item in i.Roles)
                {
                    Console.WriteLine(item);
                }
            }
            else
                Console.WriteLine("你不是合法用户");
            Console.Read();
        }

        private static bool AuthenticateUser(string username, string password)
        {
            if (username == "chenxizhang" && password == "password")
            {
                #region GenericIdentity
                //GenericIdentity identity = new GenericIdentity(
                //    username,"Custom");
                //GenericPrincipal principal = new GenericPrincipal(
                //    identity,
                //    new[] { "Admin" });
                //Thread.CurrentPrincipal = principal;
                #endregion
                MyIdentity identity = new MyIdentity(
                    username, 
                    new[] { "Admin" });
                MyPrinciple principle = new MyPrinciple(
                    identity, identity.Roles);
                Thread.CurrentPrincipal = principle;

                return true;
            }

            return false;

            
        }
    }


    class MyPrinciple : IPrincipal {
        public MyPrinciple(IIdentity identity, string[] roles)
        {
            _identity = identity;
            _roles = roles;
        }
        string[] _roles;
        private IIdentity _identity;
        private MyPrinciple() { }//禁用默认构造器
        #region IPrincipal 成员
        public IIdentity Identity
        {
            get {
                return _identity;
            }
        }
        public bool IsInRole(string role)
        {
            return _roles.Contains(role);
        }
        #endregion
    }

    class MyIdentity : IIdentity {
        public MyIdentity(string name, string[] roles) {
            _name = name;
            _roles = roles;
        }
        private string[] _roles;
        public string[] Roles {
            get {
                return _roles;
            }
        }
        private MyIdentity() { }
        #region IIdentity 成员

        public string AuthenticationType
        {
            get { return "自定义验证"; }
        }

        public bool IsAuthenticated
        {
            get { return true; }
        }

        private string _name;
        public string Name
        {
            get { return _name; }
        }

        #endregion
    }
}