.net中的身份认——AuthorizeAttribute 是对的

1..net自己的AuthorizeAttribute类来实现用户身份验证

AuthorizeAttribute类有两个重要的方法:AuthorizeCore和HandleUnauthorizedRequest。其中AuthorizeCore函数是用来判断一个请求是否通过用户验证，它的返回结果是一个bool。HandleUnauthorizedRequest函数则是在AuthorizeCore返回结果是false时会调用的函数。源代码如下所示：

实例：

[AttributeUsage(AttributeTargets.Class | AttributeTargets.Method, AllowMultiple = false)]
    public class CheckAttribute : AuthorizeAttribute
    {
        #region Methods

        protected override bool AuthorizeCore(HttpContextBase context)
        {
            var cookie = HttpContext.Current.Request.Cookies["ctoken"];
            if (cookie != null && !string.IsNullOrEmpty(cookie.Value))
            {
                var redis = new RedisService();
                var r = redis.GetUser(cookie.Value);
                if (r.Item1 && (string.IsNullOrEmpty(LoginSysUser.GetUserName()) || r.Item2 != LoginSysUser.GetUserName()))
                {

                    var mUser = new UserService().FindByUserName(r.Item2);

                    new LoginSysUser()
                    {
                        Id = mUser.USERID.ToString(),
                        UserName = mUser.USERNAME,
                        Expires = DateTime.Now.AddMinutes(20)
                    }.Login();
                    return true;
                }

            }
            var falg = !string.IsNullOrEmpty(LoginSysUser.GetId());
            if (!falg)
                context.Response.StatusCode = 403;
            return falg;
        }

        protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext)
        {
            base.HandleUnauthorizedRequest(filterContext);
            if (filterContext.HttpContext.Response.StatusCode == 403)
            {
                if (filterContext.HttpContext.Request.Url != null)
                {
                    if (filterContext.HttpContext.Request.IsAjaxRequest())
                    {
                        var result = new JsonResult
                        {
                            Data = new
                            {
                                Code = -1,
                                Message = "请先登录！"
                            },
                            JsonRequestBehavior = JsonRequestBehavior.AllowGet
                        };
                        filterContext.Result = result;
                    }
                    else
                    {
                        filterContext.Result = new RedirectResult("~/Sys/Account/Login");
                    }
                }
            }
        }

        #endregion Methods
    }