Beispiel #1
0
        protected void Application_PostAuthenticateRequest(Object sender, EventArgs e)
        {
            if (FormsAuthentication.CookiesSupported == true)
            {
                HttpCookie authCookie = Request.Cookies[FormsAuthentication.FormsCookieName];

                if (authCookie != null)
                {
                    FormsAuthenticationTicket authTicket = FormsAuthentication.Decrypt(authCookie.Value);

                    if (!authTicket.Expired)
                    {
                        //userUID is the authTicket name
                        string userUID = authTicket.Name;

                        JVKCache           jvkCache           = new JVKCache();
                        JVKUserPrivateData jvkUserPrivateData = jvkCache.GetJVKUserPrivateData(userUID);
                        JVKUser            jvkUser            = jvkCache.GetJVKUser(userUID);

                        HttpContext.Current.User = new GenericPrincipal(new GenericIdentity(jvkUserPrivateData.userUID, "Forms"), jvkUser.userPermits.Split(','));
                        System.Threading.Thread.CurrentPrincipal = HttpContext.Current.User;

                        /*
                         * ///// NOTE /////
                         * 1. there are 2 security contexts - Thread.CurrentPrincipal and Context.User
                         * 2. need to keep Thread.CurrentPrincipal in sync with Context.User
                         * 3. Thread.CurrentPrincipal is used in declarative role checks using PrincipalPermissionAttributes
                         */
                    }
                }
            }
        }
Beispiel #2
0
        public BaseController()
        {
            ViewBag.jvkUserName = string.Empty;

            //set up logging
            _logger = LogManager.GetCurrentClassLogger();

            JVKCache jvkCache = new JVKCache();

            //todo
            //set up central cache for lookup tables, this cache will be used by all users
            //jvkCache.lookups
            //lookups has sub-objects like roles, permits, role-permits, cities, states, countries, etc. ... objects that are used in the applications
            //

            //get menu string from cache
            ViewBag.stringMenu = jvkCache.GetMenuString();

            //get user private data
            string userUID = System.Web.HttpContext.Current.User.Identity.Name;

            //get user data fro cache
            if (userUID != null && userUID.Trim().Length > 0)
            {
                jvkUserPrivateData = jvkCache.GetJVKUserPrivateData(userUID);
                jvkUser            = jvkCache.GetJVKUser(userUID);

                ViewBag.jvkUserName = jvkUserPrivateData.firstName + " " + jvkUserPrivateData.lastName;
            }
        }
Beispiel #3
0
        public ActionResult Login(LoginViewModel model, string returnUrl)
        {
            if (ModelState.IsValid)
            {
                JVKUserPrivateData jvkUserPrivateData = new JVKUserPrivateData();
                JVKUser            jvkUser            = new JVKUser();
                JVKCache           jvkCache           = new JVKCache();
                UnitOfWork         uow = new UnitOfWork();

                var recordUser = uow.UserRepository.GetRecordsByFilter(c => c.StatusFlag == StatusConstant.Active && c.LoginID == model.LoginID).SingleOrDefault();

                if (recordUser != null)
                {
                    //verify password
                    if (model.Password == "password")
                    //if (System.Web.Helpers.Crypto.VerifyHashedPassword(recordUser.PasswordHash, model.Password))
                    {
                        //remove jvkUserPrivateData and jvsUser from cache
                        jvkCache.RemoveFromCache("jvsUserData" + recordUser.UserUID);
                        jvkCache.RemoveFromCache("jvsUser" + recordUser.UserUID);

                        jvkUserPrivateData = jvkCache.GetJVKUserPrivateData(recordUser.UserUID);
                        jvkUser            = jvkCache.GetJVKUser(recordUser.UserUID);

                        //clear all existing cookies
                        Response.Cookies.Clear();

                        //set authentication cookie
                        int sessionCookieTimeout             = Convert.ToInt32(System.Configuration.ConfigurationManager.AppSettings["sessionCookieTimeout"]);
                        FormsAuthenticationTicket authTicket = new FormsAuthenticationTicket(1, jvkUser.userCookieToken, DateTime.Now, DateTime.Now.AddMinutes(sessionCookieTimeout), false, jvkUser.userRoleIds);
                        HttpCookie authCookie = new HttpCookie(FormsAuthentication.FormsCookieName, FormsAuthentication.Encrypt(authTicket));

                        //add cookie to the response stream
                        Response.Cookies.Add(authCookie);

                        if (Url.IsLocalUrl(returnUrl))
                        {
                            return(Redirect(returnUrl));
                        }
                        else
                        {
                            return(RedirectToAction("Index", "Home"));
                        }
                    }
                    else
                    {
                        ///// login failed /////
                        //cross controller call, put in TempData instead of ViewBag
                        TempData["alertBox"] = new BootstrapAlertBox(AlertType.Success, "Login failed. Try again.");

                        return(RedirectToAction("Index", "Home"));
                    }
                }
            }

            // If we got this far, something failed, redisplay form
            return(View(model));
        }