Beispiel #1
0
        private void DecryptLogin(LoginViewModel model)
        {
            model.UserName = string.Empty;
            model.Password = string.Empty;

            var key = Request.Cookies["tokenBP1"].Value;
            var iv  = Request.Cookies["tokenBP2"].Value;

            if (key != null && iv != null)
            {
                try
                {
                    var crypto = new SimpleAes();
                    key            = crypto.DecryptString(key);
                    iv             = crypto.DecryptString(iv);
                    model.UserName = AesForLogin.DecryptStringAES(key, iv, model.Log1);
                    model.Password = AesForLogin.DecryptStringAES(key, iv, model.Log2);
                }
                catch (Exception)
                {
                    model.Password = string.Empty;
                    ModelState.AddModelError("", "The user name or password provided is incorrect.");
                }
            }
            else
            {
                model.Password = string.Empty;
                ModelState.AddModelError("", "Your Session is expire please try login again");
            }
        }
Beispiel #2
0
        public ActionResult Login(string ReturnUrl = "")
        {
            ViewBag.ReturnUrl = ReturnUrl;

            var crypto = new SimpleAes();

            Session["BPKey"]   = AesForLogin.Create16DigitString();
            Session["BPKeyIV"] = AesForLogin.Create16DigitString();
            var cookie1 = new HttpCookie("tokenBP1");
            var cookie2 = new HttpCookie("tokenBP2");

            cookie1.Value = crypto.EncryptToString(Session["BPKey"].ToString());
            cookie2.Value = crypto.EncryptToString(Session["BPKeyIV"].ToString());

            Response.Cookies.Remove("tokenBP1");
            Response.Cookies.Remove("tokenBP2");

            Response.Cookies.Add(cookie1);
            Response.Cookies.Add(cookie2);

            return(View());
        }