using BMOA.Application.System;
using BMOA.Common;
using BMOA.Web.Models;
using Newtonsoft.Json;
using System;
using System.Collections.Generic;
using System.Configuration;
using System.Linq;
using System.Net.Http;
using System.Web;
using System.Web.Http.Controllers;
using System.Web.Http.Filters;
namespace KBMOA.Web.Filter
{
/// <summary>
/// Api请求过滤器
/// </summary>
public class ApiFilter : ActionFilterAttribute
{
/// <summary>
/// 小程序端请使用sha1加密appkey
/// </summary>
/// <param name="actionContext"></param>
public override void OnActionExecuting(HttpActionContext actionContext)
{
string appkey = string.Empty;
string apppwd = string.Empty;
if (actionContext.Request.Headers.Contains("appkey"))
{
appkey = HttpUtility.UrlDecode(actionContext.Request.Headers.GetValues("appkey").FirstOrDefault());
}
if (actionContext.Request.Headers.Contains("apppwd"))
{
apppwd = HttpUtility.UrlDecode(actionContext.Request.Headers.GetValues("apppwd").FirstOrDefault());
}
//判断请求头是否包含以下参数
if (string.IsNullOrEmpty(appkey) || string.IsNullOrEmpty(apppwd))
{
Check(actionContext);
base.OnActionExecuting(actionContext);
}
if (appkey.Equals(YG_Config.appkey) == false || string.Equals(apppwd, ZEncypt.Sha1(appkey), StringComparison.CurrentCultureIgnoreCase) == false)
{
Check(actionContext);
base.OnActionExecuting(actionContext);
}
}
private void Check(HttpActionContext actionContext)
{
ResponseModel result = new ResponseModel() { Success = false };
result.Message = "此请求未经授权";
actionContext.Response = actionContext.Request.CreateResponse(result);
}
}
}