AuthorizeAttribute

最新推荐文章于 2025-08-25 15:50:10 发布

原创最新推荐文章于 2025-08-25 15:50:10 发布 · 1.4k 阅读

0 ·

本内容遵循CC 4.0 BY-SA版权协议

收录于

当前文章被以下社区和专栏收录：

本文介绍了一个自定义的用户授权类UserAuthorize，该类继承自AuthorizeAttribute并重写了OnAuthorization和AuthorizeCore方法，用于实现对用户的权限验证。当未通过验证时，用户将被重定向到登录页面，并携带返回URL参数。

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.Mvc;
using System.Web.Security;

namespace pdf2word.Areas.User
{
public class UserAuthorize : AuthorizeAttribute
{
public override void OnAuthorization(AuthorizationContext filterContext)
{
base.OnAuthorization(filterContext);
if (filterContext.Result is HttpUnauthorizedResult)
{
filterContext.Result = new RedirectResult(
string.Concat("/user/Account/Login", "?ReturnUrl=", filterContext.HttpContext.Server.UrlEncode(filterContext.HttpContext.Request.Url.ToString())));
}
}

private bool CookieIsValid(HttpCookie cookie)
{
if (cookie == null) return false;

try
{
FormsAuthenticationTicket ticketback = FormsAuthentication.Decrypt(cookie.Value);
if (String.IsNullOrEmpty(ticketback.Name))
return false;
else
return true;
}
catch
{
return false;
}
}

protected override bool AuthorizeCore(HttpContextBase httpContext)
{
if (httpContext == null)
return false;

if (CookieIsValid(httpContext.Request.Cookies["cokiename"]))
return true;
else
{
httpContext.Response.StatusCode = 403;
return false;
}
}
}
}