protected virtual bool ExecAuthorizeCore(HttpContextBase httpContext)
{
//获取SessionKey
//var token = httpContext.Request[Define.Token];
var authenticationService = ServiceLocator.Current.Resolve <IAuthenticationService>();
if (!authenticationService.Islogged(httpContext))
{
httpContext.Response.StatusCode = 400;
return(false);
}
//验证用户信息
try
{
_webSiteUser = authenticationService.GetCurrentUser(httpContext);
}
catch (Exception ex)
{
_log.Error(String.Format("{0}获取websiteuser失败,Ex.M{1},Ex.S{2} ", httpContext.User.Identity.Name, ex.Message, ex.StackTrace));
}
// 解密失败返回结果
if (_webSiteUser == null)
{
httpContext.Response.StatusCode = 401;
//httpContext.Response.SubStatusCode = 1;
return(false);
}
return(true);
}
public ActionResult DeleteConfirmed(int id)
{
WebSiteUser websiteuser = db.WebSiteUsers.Single(w => w.WebSiteUserID == id);
db.WebSiteUsers.DeleteObject(websiteuser);
db.SaveChanges();
return(RedirectToAction("Index"));
}
public void SetAuthorize(HttpContextBase httpContext, WebSiteUser webSiteUser)
{
if (webSiteUser == null)
{
throw new ArgumentNullException("webSiteUser");
}
FormsAuthentication.SetAuthCookie(webSiteUser.ToJson(), false);
}
//
// GET: /UserAccess/Details/5
public ActionResult Details(int id = 0)
{
WebSiteUser websiteuser = db.WebSiteUsers.Single(w => w.WebSiteUserID == id);
if (websiteuser == null)
{
return(HttpNotFound());
}
return(View(websiteuser));
}
//
// GET: /UserAccess/Edit/5
public ActionResult Edit(int id = 0)
{
WebSiteUser websiteuser = db.WebSiteUsers.Single(w => w.WebSiteUserID == id);
if (websiteuser == null)
{
return(HttpNotFound());
}
ViewBag.WebLinkID = new SelectList(db.WebLinks, "WebLinkID", "Name", websiteuser.WebLinkID);
ViewBag.WebSiteRoleID = new SelectList(db.UserRoles, "WebRoleID", "WebRole", websiteuser.WebSiteRoleID);
ViewBag.AppEntityID = new SelectList(db.Users, "AppEntityID", "PIN", websiteuser.AppEntityID);
return(View(websiteuser));
}
public ActionResult Edit(WebSiteUser websiteuser)
{
if (ModelState.IsValid)
{
db.WebSiteUsers.Attach(websiteuser);
db.ObjectStateManager.ChangeObjectState(websiteuser, EntityState.Modified);
db.SaveChanges();
return(RedirectToAction("Index"));
}
ViewBag.WebLinkID = new SelectList(db.WebLinks, "WebLinkID", "Name", websiteuser.WebLinkID);
ViewBag.WebSiteRoleID = new SelectList(db.UserRoles, "WebRoleID", "WebRole", websiteuser.WebSiteRoleID);
ViewBag.AppEntityID = new SelectList(db.Users, "AppEntityID", "PIN", websiteuser.AppEntityID);
return(View(websiteuser));
}
public ActionResult Create(WebSiteUser websiteuser)
{
if (ModelState.IsValid)
{
db.WebSiteUsers.AddObject(websiteuser);
db.SaveChanges();
return(RedirectToAction("Index"));
}
ViewBag.WebLinkID = new SelectList(db.WebLinks, "WebLinkID", "Name", websiteuser.WebLinkID);
ViewBag.WebSiteRoleID = new SelectList(db.UserRoles, "WebRoleID", "WebRole", websiteuser.WebSiteRoleID);
ViewBag.AppEntityID = new SelectList(db.Users, "AppEntityID", "PIN", websiteuser.AppEntityID);
return(View(websiteuser));
}
protected virtual void DoAuthorization(AuthorizationContext filterContext)
{
var httpContext = filterContext.HttpContext;
var authenticationService = ServiceLocator.Current.Resolve <IAuthenticationService>();
if (!authenticationService.Islogged(httpContext))
{
httpContext.Response.StatusCode = 400;
return;
}
//验证用户信息
try
{
_webSiteUser = authenticationService.GetCurrentUser(httpContext);
}
catch (Exception ex)
{
_log.Error(String.Format("{0}获取websiteuser失败,Ex.M{1},Ex.S{2} ", httpContext.User.Identity.Name, ex.Message, ex.StackTrace));
}
// 解密失败返回结果
if (_webSiteUser == null)
{
httpContext.Response.StatusCode = 401;
//httpContext.Response.SubStatusCode = 1;
return;
}
//authorize
string controllerName = filterContext.ActionDescriptor.ControllerDescriptor.ControllerName;
string actionNae = filterContext.ActionDescriptor.ActionName;
UserController currentController = filterContext.Controller as UserController;
if (currentController == null)
{
return;
}
//if (!currentController.HasRightForAction(controllerName, actionNae))
//{
// httpContext.Response.StatusCode = 401;
// return;
//}
}
void Session_Start(object sender, EventArgs e)
{
//Code that runs when a new session is started
Application.Lock();
using (var dbContext = new SmarteezDatabaseEntities())
{
WebSiteUser websiteUser = new WebSiteUser()
{
ClientBrowser = HttpContext.Current.Request.Browser.Browser,
MachineIP = string.IsNullOrEmpty(HttpContext.Current.Request.ServerVariables["HTTP_X_FORWARDED_FOR"]) ? HttpContext.Current.Request.ServerVariables["REMOTE_ADDR"] : HttpContext.Current.Request.ServerVariables["HTTP_X_FORWARDED_FOR"],
VisitDate = DateTime.Now
};
int i = dbContext.Users.Count();
dbContext.WebSiteUsers.Add(websiteUser);
dbContext.SaveChanges();
int userCount = dbContext.WebSiteUsers.Count <WebSiteUser>() + 1000;
Application.Add("UserCount", userCount);
}
Application.UnLock();
}
protected void SetAuthorize(WebSiteUser webSiteUser)
{
AuthenticationService.SetAuthorize(base.HttpContext, webSiteUser);
}