protected override IResult <AppAuthorizationResult> OnExecute(IParameter commandParameter)
{
IResult <AppAuthorizationResult> result = new Result <AppAuthorizationResult>();
GetAppAuthorizationParameter parameter = commandParameter as GetAppAuthorizationParameter;
result.Data = new AppAuthorizationResult();
//接口逻辑代码
using (ServiceContext context = new ServiceContext())
{
var appSecret = context.SvrAppInfo.Where(p => p.AppId == parameter.AppId && p.Status == 1).Select(p => p.AppSecret).FirstOrDefault();
if (appSecret == null)
{
return(ErrorResult <AppAuthorizationResult> .ParameterError);
}
var appParameter = context.SvrAppService.Where(p => p.AppId == parameter.AppId && p.ServiceId == parameter.ServiceId && p.Status == 1).Select(p => p.Parameter).FirstOrDefault();
if (appParameter == null)
{
return(ErrorResult <AppAuthorizationResult> .ParameterError);
}
result.Data.Parameter = appParameter;
result.Data.Appsecret = appSecret;
var authList = context.SvrAppAuthorization.Where(p => p.AppId == parameter.AppId && p.Status == 1).ToList();
result.Data.AuthorizationData = new Hashtable();
foreach (var item in authList)
{
result.Data.AuthorizationData[item.AuthorizationCode] = 1;
}
}
return(result);
}
public override async Task OnActionExecutionAsync(ActionExecutingContext context, ActionExecutionDelegate next)
{
Controller controller = context.Controller as Controller;
string contraint = null;
var request = controller.Request;
var appid = request.Headers["appid"].FirstOrDefault();
//验证服务调用授权
if ((IdentityMode == IdentityMode.Hybird || IdentityMode == IdentityMode.Credential) && !string.IsNullOrEmpty(appid))
{
var cacheExecutor = context.HttpContext.RequestServices.GetService <CommandCacheExecutor>();
var service = request.Headers["service"].FirstOrDefault();
var nonce = request.Headers["nonce"].FirstOrDefault();
var sign = request.Headers["sign"].FirstOrDefault();
request.Body.Position = 0;
StreamReader streamReader = new StreamReader(request.Body);
var data = streamReader.ReadToEnd();
var getAppAuthorizationParameter = new GetAppAuthorizationParameter()
{
AppId = appid,
ServiceId = service
};
var getAppAuthorizationResult = cacheExecutor.Execute(new GetAppAuthorizationCommand(),
getAppAuthorizationParameter, new CommandCacheOptions()
{
Key = "appAuthorization"
});
if (getAppAuthorizationResult.Code != 0)
{
context.Result = new ObjectResult(ErrorResult <int> .GetErrorResult(getAppAuthorizationResult.Code, "获取授权信息错误"));
return;
}
string rawString = string.Format("service={0}&appid={1}&data={2}&nonce={3}&appsecret={4}",
service, appid, data, nonce, getAppAuthorizationResult.Data.Appsecret);
var md5 = System.Security.Cryptography.MD5.Create();
var hashBytes = md5.ComputeHash(Encoding.UTF8.GetBytes(rawString));
var signCheck = BitConverter.ToString(hashBytes).Replace("-", "").ToUpper();
if (signCheck != sign)
{
context.Result = new ObjectResult(ErrorResult <int> .SignatureError);
return;
}
//无访问权
if (string.IsNullOrEmpty(CredentialCode) || !getAppAuthorizationResult.Data.AuthorizationData.ContainsKey(CredentialCode))
{
context.Result = new ObjectResult(ErrorResult <int> .NoAuthorization);
return;
}
try
{
var param = JsonConvert.DeserializeObject <Dictionary <string, object> >(data);
if (param.ContainsKey("Identity"))
{
contraint = param["Identity"] as string;
}
}
catch (Exception ex)
{
context.Result = new ObjectResult(ErrorResult <int> .Exception(ex));
return;
}
if (string.IsNullOrEmpty(contraint))
{
contraint = getAppAuthorizationResult.Data.Parameter;
}
}
if ((IdentityMode == IdentityMode.Hybird || IdentityMode == IdentityMode.Cookies) && string.IsNullOrEmpty(appid))
{
contraint = request.Headers["Identity"].FirstOrDefault();
if (string.IsNullOrEmpty(contraint))
{
var auth = await controller.HttpContext.AuthenticateAsync(Scheme);
if (!auth.Succeeded)
{
context.Result = new ObjectResult(ErrorResult <int> .NoAuthorization);
return;
}
contraint = (auth.Principal.Identity as ClaimsIdentity).Claims.FirstOrDefault().Value;
}
}
IParameter parameter = null;
if (context.ActionArguments.Count() == 1 && context.ActionArguments.First().Value is IParameter)
{
parameter = context.ActionArguments.First().Value as IParameter;
}
//若当前为权限控制接口，则根据当前设定的角色来设置接口权限信息
if (parameter is AuthorizationParameter)
{
(parameter as AuthorizationParameter).Initialize(context.HttpContext.RequestServices, contraint, AuthorizationCode);
}
await next();
}