Пример #1
0
    protected void Page_Load(object sender, EventArgs e)
    {
        Response.AddHeader("P3P", "CP=CAO PSA OUR");

        ParseSPTokenRequest();

        string NeedLogin = Request["NeedLogin"];

        if ("0".Equals(NeedLogin))
        {
            //已登录流程
            TokenValidate.IsRedircet = false;
            TokenValidate.Validate();
            if (TokenValidate.Result == 0)
            {
                this.ssoFunc();
            }
            else if (CommonUtility.IsParameterExist("NeedLogin", this.Page))
            {
                //不需要客户认证平台登陆
                if (!"0".Equals(Request["NeedLogin"]))
                {
                    Response.Redirect(ReturnURL + "?NeedLogin=1");
                    //Response.Redirect("yiqigou_login.aspx");
                }
            }
        }
        else
        {
        }
    }
Пример #2
0
 protected void Page_Load(object sender, EventArgs e)
 {
     TokenValidate.Validate();
     int    Result = TokenValidate.Result;
     string CustID = TokenValidate.CustID;
     string dd     = "1";
 }
Пример #3
0
    protected void Page_Load(object sender, EventArgs e)
    {
        Response.AddHeader("P3P", "CP=CAO PSA OUR");
        StringBuilder strLog = new StringBuilder();

        //判断并解析SPTokenRequest参数
        ParseSPTokenRequest();
        //生成udb请求参数,注意CreateUdbPassportLoginRequest()方法必须放在ParseSPTokenRequst()后面
        CreateUdbPassportLoginRequest();
        //已登录流程
        TokenValidate.IsRedircet = false;
        TokenValidate.Validate();
        if (TokenValidate.Result == 0)
        {
            this.ssoFunc();
        }
        else if (CommonUtility.IsParameterExist("NeedLogin", this.Page))
        {
            //不需要客户认证平台登陆
            if (!"0".Equals(Request["NeedLogin"]))
            {
                Response.Redirect(ReturnURL + "?NeedLogin=1");
            }
        }
    }
Пример #4
0
    protected void Page_Load(object sender, EventArgs e)
    {
        if (!Page.IsPostBack)
        {
            TokenValidate.Validate();
            if (CommonBizRules.IsUrlParams(HttpContext.Current.Request.Url.OriginalString))
            {
                SPID = HttpUtility.HtmlDecode(Request.QueryString["SPID"].ToString());
               
            }
            CustID = TokenValidate.CustID;
           
            proInfoList.Items.Clear();
            DataTable dt = CustProvinceRelation.GetProvince();
            if (dt != null)
            {
                for (int i = 0; i < dt.Rows.Count; i++)
                {
                    ListItem ltem = new ListItem();
                    ltem.Value = dt.Rows[i]["ProvinceID"].ToString();
                    ltem.Text = dt.Rows[i]["ProvinceName"].ToString();
                    proInfoList.Items.Add(ltem);
                }
                proInfoList.Items.Add("请选择省份");
                proInfoList.SelectedIndex = dt.Rows.Count ;
            }
         

        }
    }
Пример #5
0
    protected void Page_Load(object sender, EventArgs e)
    {
        if (!Page.IsPostBack)
        {
            TokenValidate.IsRedircet = true;
            TokenValidate.Validate();
            CustID = TokenValidate.CustID;
            //取出问题列表
            DataSet ds = PassWordBO.QueryPwdQuestion();

            //给问题一下拉框赋值
            ddlQuestion1.DataSource     = ds;
            ddlQuestion1.DataValueField = "QuestionID";
            ddlQuestion1.DataTextField  = "Question";
            ddlQuestion1.DataBind();

            //给问题二下拉框赋值
            ddlQuestion2.DataSource     = ds;
            ddlQuestion2.DataValueField = "QuestionID";
            ddlQuestion2.DataTextField  = "Question";
            ddlQuestion2.DataBind();

            //给问题三下拉框赋值
            ddlQuestion3.DataSource     = ds;
            ddlQuestion3.DataValueField = "QuestionID";
            ddlQuestion3.DataTextField  = "Question";
            ddlQuestion3.DataBind();

            //根据当前客户ID取得答案列表
            DataSet dsAnswer = PassWordBO.QueryPwdQuestionAnswer(CustID);

            int j = 0;

            foreach (DataRow row in dsAnswer.Tables[0].Rows)
            {
                if (j == 0)
                {
                    txtHidSq1.Text             = row[0].ToString();
                    ddlQuestion1.SelectedIndex = int.Parse(row[1].ToString());
                    txtAnswer1.Text            = row[2].ToString();
                }
                else if (j == 1)
                {
                    txtHidSq2.Text             = row[0].ToString();
                    ddlQuestion2.SelectedIndex = int.Parse(row[1].ToString());
                    txtAnswer2.Text            = row[2].ToString();
                }
                else if (j == 2)
                {
                    txtHidSq3.Text             = row[0].ToString();
                    ddlQuestion3.SelectedIndex = int.Parse(row[1].ToString());
                    txtAnswer3.Text            = row[2].ToString();
                }

                j++;
            }
        }
    }
Пример #6
0
    protected void Page_Load(object sender, EventArgs e)
    {
        if (PageUtility.IsParameterExist("ReturnUrl", this.Page))
        {
            ReturnUrl = Request["ReturnUrl"];
        }

        if (!Page.IsPostBack)
        {
            //Page.RegisterStartupScript("", "<script>csstype();</script>");
            this.Page.Title = "号码百事通客户信息平台";
            string Spid = null;
            if (Request.QueryString["SPID"] != null)
            {
                if (Request.QueryString["SPID"].ToString() != "35000000")
                {
                    Spid = Request.QueryString["SPID"].ToString();
                    this.spidtxt.Value = Spid;
                }
                else
                {
                    Spid = "35000000";
                    this.spidtxt.Value = Spid;
                }
            }
            else
            {
                Spid = "";
                this.spidtxt.Value = Spid;
            }


            string PageName     = Request.Url.AbsolutePath;
            int    LastLine     = PageName.LastIndexOf('/');
            int    LocationASPX = PageName.LastIndexOf(".aspx");
            PageName = PageName.Substring(LastLine + 1, LocationASPX - LastLine - 1);
            //获取不需要登录的页面列表,若为不需要登录的页面则不校验Cookie
            string NoLoginPageList = System.Configuration.ConfigurationManager.AppSettings["NoLoginPageList"];
            if (NoLoginPageList.IndexOf(PageName) < 0)
            {
                TokenValidate.IsRedircet = true;
            }
            TokenValidate.IsRedircet = false;

            TokenValidate.Validate();
            string CustID = TokenValidate.CustID;
            OuterID = TokenValidate.OuterID;
            if (CustID != "")
            {
                this.custidtxt.Value = CustID;
            }
            if (!String.IsNullOrEmpty(OuterID))
            {
                this.outeridtxt.Value = OuterID;
            }
        }
    }
Пример #7
0
    protected void Page_Load(object sender, EventArgs e)
    {
        //Response.AddHeader("P3P", "CP=CAO PSA OUR");

        err_Username.InnerHtml = "";
        err_Password.InnerHtml = "";
        err_code.InnerHtml     = "";
        backCount.Value        = Convert.ToString((Convert.ToInt32(backCount.Value) - 1));

        //判断并解析SPTokenRequest参数
        ParseSPTokenRequest();
        //生成udb请求参数,注意CreateUdbPassportLoginRequest()方法必须放在ParseSPTokenRequst()后面
        CreateUdbPassportLoginRequest();
        //新浪微博认证请求
        SinaOAuthRequest();
        //QQ认证
        QqOAuthRequest();
        //省网厅单点登陆入口
        if (SourceType == "1")
        {
            log(String.Format("【省网厅登录】:SourceType:{0},ProvinceID:{1}", SourceType, UAProvinceID));
            string Url = "login1.aspx?ProvinceID=" + UAProvinceID;
            PageUtility.SetCookie(ReturnURL, "ReturnURL", this.Page);
            PageUtility.SetCookie(SPID, "SPID", this.Page);
            Response.Redirect(Url, true);
            return;
        }

        //已登录流程
        TokenValidate.IsRedircet = false;
        TokenValidate.Validate();
        if (TokenValidate.Result == 0)
        {
            this.ssoFunc();
        }
        else if (CommonUtility.IsParameterExist("NeedLogin", this.Page))
        {
            //不需要客户认证平台登陆
            if (!"0".Equals(Request["NeedLogin"]))
            {
                Response.Redirect(ReturnURL + "?NeedLogin=1");
            }
        }

        if (!Page.IsPostBack)
        {
            BindAuthenType();
        }
        else
        {
            foreach (ListItem item in ddlAuthenTypeList.Items)
            {
                item.Attributes.Add("onclick", "javascript:selvalue()");
            }
        }
    }
Пример #8
0
 public IActionResult ValidarTokenWeb([FromBody] TokenValidate validate)
 {
     if (_repo.ValidarToken(validate.WebToken))
     {
         return(Ok(true));
     }
     else
     {
         return(Ok(false));
     }
 }
Пример #9
0
    protected void Page_Load(object sender, EventArgs e)
    {
        if (!Page.IsPostBack)
        {
            string Spid  = null;
            string Emali = null;
            string Msg   = null;
            if (Request.QueryString["SPID"] != null)
            {
                if (Request.QueryString["SPID"].ToString() != "35000000")
                {
                    Spid = Request.QueryString["SPID"].ToString();
                }
                else
                {
                    Spid = "35000000";
                }
            }
            else
            {
                Spid = "";
            }
            TokenValidate.IsRedircet = true;
            TokenValidate.Validate();
            string CustID = TokenValidate.CustID;
            //  string CustID = "571300100";
            if (CustID != "")
            {
                this.custidtxt.Value = CustID;
            }
            // Emali = SetMail.SelEmailAddress(this.custidtxt.Value, Spid, out Msg);
            DataSet ds = new DataSet();
            ds = SetMail.SelEmailAddress(this.custidtxt.Value, out Msg);
            if (ds.Tables.Count > 0 && ds.Tables[0].Rows.Count > 0)
            {
                this.Emailtxt.Value = ds.Tables[0].Rows[0]["Email"].ToString();

                string Emailclass = ds.Tables[0].Rows[0]["EmailClass"].ToString();
                if (Emailclass == "1")
                {
                    this.EmailClassLab.Text = "一般邮箱";
                }
                else if (Emailclass == "2")
                {
                    this.EmailClassLab.Text = "认证邮箱";
                }
            }
        }
    }
Пример #10
0
    protected void Page_Load(object sender, EventArgs e)
    {
        if (!Page.IsPostBack)
        {
            TokenValidate.IsRedircet = true;
            TokenValidate.Validate();
            //CustID = TokenValidate.CustID;

            SPID          = Request["SPID"] == null ? String.Empty : Request["SPID"].ToString();
            AuthenPhone   = Request["AuthenMobile"];
            SmsAuthenCode = Request["AuthenCode"];
            ParseSPTokenRequest();
            //CustID = TokenValidate.CustID;
            CreateSPTokenRequest();
        }
    }
Пример #11
0
    protected void Page_Load(object sender, EventArgs e)
    {
        if (!Page.IsPostBack)
        {
            TokenValidate.Validate();
            if (CommonBizRules.IsUrlParams(HttpContext.Current.Request.Url.OriginalString))
            {
                if (Request.QueryString["SPID"] != null)
                {
                    SPID = Request.QueryString["SPID"].ToString();
                    //  ReturnUrl = Request.QueryString["ReturnUrl"].ToString();
                }
                else
                {
                    SPID = "35000000";
                }
                //SPID = HttpUtility.HtmlDecode(Request.QueryString["SPID"].ToString());
                //ReturnUrl = HttpUtility.HtmlDecode(Request.QueryString["ReturnUrl"].ToString());
            }

            CustID = TokenValidate.CustID;
            string UserAccount = "";

            try
            {
                string ReturnUrl = HttpUtility.HtmlDecode(Request.QueryString["ReturnUrl"].ToString());
                PageUtility.SetCookie(ReturnUrl, "ReferrerUrl", this.Page);
                //string url = Page.Request.UrlReferrer.ToString();5
                //PageUtility.SetCookie(url, "ReferrerUrl", this.Page);
            }
            catch (System.Exception ex)
            { }
            int Result = CustBasicInfo.GetUserAccount(CustID, out UserAccount, out ErrMsg);
            if (Result == 0)
            {
                //判断此人时候有商旅卡号!
                this.Label1.Text    = "您已经申请过商旅卡了,你的商旅卡号为:" + UserAccount;
                this.Label1.Visible = true;
                btnlogin2.Visible   = true;
            }
            else
            {
                Response.Redirect("bizCard2.aspx?id=6&SPID=" + SPID);
            }
        }
    }
Пример #12
0
        private Task <ClaimsIdentity> GetIdentity(string applicationGUID, string username, string password)
        {
            bool boolUserValid =
                TokenValidate.ValidateUser(
                    Configuration.GetSection("ConnectionStrings:DefaultConnection").Value,
                    applicationGUID,
                    username,
                    password);

            if (boolUserValid)
            {
                return(Task.FromResult(new ClaimsIdentity(new GenericIdentity(username, "Token"), new Claim[] { })));
            }

            // Credentials are invalid, or account doesn't exist
            return(Task.FromResult <ClaimsIdentity>(null));
        }
Пример #13
0
        public async Task <IActionResult> Login([FromBody] UserForLoginDto userForRegisterDto)
        {
            if (_repo.ValidarConfirmacion(userForRegisterDto.Email) == false)
            {
                var numeroNuevo = _repo.NumeroConfirmacion();
                _repo.ActualizarNumeroConfirmacion(userForRegisterDto.Email, numeroNuevo);
                return(Ok("SINCONFIRMAR"));
            }



            var userFromRepo = await _repo.Login(userForRegisterDto.Email.ToLower(), userForRegisterDto.Password);

            if (userFromRepo == null) //User login failed
            {
                return(Ok(false));
            }

            //generate token
            var tokenHandler    = new JwtSecurityTokenHandler();
            var key             = Encoding.ASCII.GetBytes(_config.GetSection("AppSettings:Token").Value);
            var tokenDescriptor = new SecurityTokenDescriptor
            {
                Subject = new ClaimsIdentity(new Claim[] {
                    new Claim(ClaimTypes.NameIdentifier, userFromRepo.Id.ToString()),
                    new Claim(ClaimTypes.Name, userFromRepo.Email)
                }),
                Expires            = DateTime.Now.AddDays(1),
                SigningCredentials = new SigningCredentials(new SymmetricSecurityKey(key), SecurityAlgorithms.HmacSha512Signature)
            };

            var tokenCreated = tokenHandler.CreateToken(tokenDescriptor);
            var token        = tokenHandler.WriteToken(tokenCreated);

            TokenValidate tokenValidate = new TokenValidate();

            tokenValidate.Cliente         = userFromRepo.NumeroCliente;
            tokenValidate.WebToken        = token;
            tokenValidate.FechaGeneracion = DateTime.Now;

            await _repo.InsertToken(tokenValidate);

            return(Ok(new { token, userFromRepo.NumeroCliente }));
        }
Пример #14
0
    protected void Page_Load(object sender, EventArgs e)
    {
        error.InnerHtml    = "";
        err_code.InnerHtml = "";
        TokenValidate.Validate();
        CustID = TokenValidate.CustID;

        if (!Page.IsPostBack)
        {
            //this.CustID = "117663768";

            btn_OK.Attributes.Add("onclick", "return CheckInput('1')");
            if (CommonBizRules.IsUrlParams(HttpContext.Current.Request.Url.OriginalString))
            {
                SPID      = HttpUtility.HtmlDecode(Request.QueryString["SPID"].ToString());
                ReturnUrl = HttpUtility.HtmlDecode(Request.QueryString["ReturnUrl"].ToString());
            }
        }
    }
Пример #15
0
        public async Task <IActionResult> Post([FromBody] User user,
                                               [FromServices] UserManager <IdentityUser> userManager,
                                               [FromServices] SignInManager <IdentityUser> signInManager,
                                               [FromServices] SigningConfigurations signingConfigurations,
                                               [FromServices] TokenConfigurations tokenConfigurations)
        {
            await CheckUserCreatedAsync(userManager);

            if (string.IsNullOrEmpty(user.Email))
            {
                return(NotFound(TokenValidate.Create(0, "E-mail invalid")));
            }
            if (string.IsNullOrEmpty(user.Password))
            {
                return(NotFound(TokenValidate.Create(0, "Password invalid")));
            }

            IdentityUser appUser = await userManager.FindByEmailAsync(user.Email);

            if (appUser == null)
            {
                return(NotFound(TokenValidate.Create(0, "User not exists")));
            }
            var result = await signInManager.CheckPasswordSignInAsync(appUser, user.Password, false);

            if (!result.Succeeded)
            {
                return(NotFound(TokenValidate.Create(0, "User not credentials")));
            }

            ClaimsIdentity claimsIdentity = new ClaimsIdentity(new GenericIdentity(appUser.Email, "Login"),
                                                               new[] {
                new Claim(JwtRegisteredClaimNames.Jti, appUser.Id),
                new Claim(JwtRegisteredClaimNames.UniqueName, appUser.Email)
            }
                                                               );

            JwtSecurityTokenHandler handler       = new JwtSecurityTokenHandler();
            SecurityToken           securityToken = handler.CreateToken(tokenConfigurations, signingConfigurations, claimsIdentity);
            string token = handler.WriteToken(securityToken);

            return(Ok(TokenValidate.Create(1, "Login Succeeded", handler.DateCreateToken(), handler.DateExpirationToken(), token)));
        }
Пример #16
0
    protected void Page_Load(object sender, EventArgs e)
    {
        if (!Page.IsPostBack)
        {
            string mobile = null;
            string Spid   = null;
            string Msg    = "";

            TokenValidate.IsRedircet = true;
            TokenValidate.Validate();
            string CustID = TokenValidate.CustID;
            if (CustID != "")
            {
                this.custidtxt.Value = CustID;
            }
            Spid = Request["SPID"] == null ? String.Empty : Request["SPID"].ToString();
            //if (Request["SPID"] != null)
            //{
            //    if (Request["SPID"].ToString() != "35000000")
            //    {
            //        Spid = Request["SPID"].ToString();
            //    }
            //    else
            //    {
            //        Spid = "35000000";
            //    }
            //}
            //else
            //{
            //    Spid = "";
            //}
            if (Request["Phone"] != null)
            {
                mobile = Request["Phone"].ToString();
                this.verifyMobile.Value = mobile;
                return;
            }

            mobile = PhoneBO.SelPhoneNumV2(this.custidtxt.Value, Spid, out Msg);
            this.verifyMobile.Value = mobile;
        }
    }
Пример #17
0
    protected void Page_Load(object sender, EventArgs e)
    {
        if (!Page.IsPostBack)
        {
            string url = Request.Url.AbsoluteUri;
            if (Request.QueryString["SPID"] != null)
            {
                Spid = Request.QueryString["SPID"].ToString();
                this.spidtxt.Value = Spid;
            }

            TokenValidate.IsRedircet = true;
            TokenValidate.Validate();
            string CustID = TokenValidate.CustID;
            if (CustID != "")
            {
                this.custidtxt.Value = CustID;
            }
        }
    }
        public async Task <bool> InsertToken(TokenValidate validate)
        {
            bool Regresa = false;

            try
            {
                var TokenExist = _context.TokenValidates.Where(x => x.WebToken == validate.WebToken && x.FechaGeneracion.AddHours(1) < DateTime.Now).ToList().Count();

                if (TokenExist == 0)
                {
                    _context.TokenValidates.Add(validate);
                    var boleana = await _context.SaveChangesAsync();

                    if (boleana == 1)
                    {
                        Regresa = true;

                        var deleteFromUser = _context.TokenValidates.Where(x => x.FechaGeneracion.AddHours(1) < DateTime.Now).ToList();

                        foreach (var item in deleteFromUser)
                        {
                            _context.TokenValidates.Remove(item);
                            _context.SaveChanges();
                        }
                    }
                    else
                    {
                        Regresa = false;
                    }
                }
                else
                {
                    Regresa = false;
                }
            }
            catch (Exception ex)
            {
            }

            return(Regresa);
        }
Пример #19
0
    protected void Page_Load(object sender, EventArgs e)
    {
        if (!Page.IsPostBack)
        {
            string Spid = null;

            TokenValidate.IsRedircet = true;
            TokenValidate.Validate();
            string CustID = TokenValidate.CustID;

            Spid = Request["SPID"] == null ? String.Empty : Request["SPID"];
            //if (Request.QueryString["SPID"] != null)
            //{
            //    if (Request.QueryString["SPID"].ToString() != "35000000")
            //    {
            //        Spid = Request.QueryString["SPID"].ToString();
            //    }
            //    else
            //    {
            //        Spid = "35000000";
            //    }
            //}
            //else
            //{
            //    Spid = "";
            //}

            DataSet ds = PhoneBO.GetAllPhone(CustID, out Msg);
            if (ds.Tables.Count > 0 && ds.Tables[0].Rows.Count > 0)
            {
                this.Repeater1.DataSource = ds;
                this.Repeater1.DataBind();
            }
            else
            {
                Response.Redirect("setMobile.aspx?id=4&SPID=35000000");
            }
        }
    }
Пример #20
0
    protected void Page_Load(object sender, EventArgs e)
    {
        err_code.InnerHtml = "";
        error.InnerHtml    = "";
        if (!Page.IsPostBack)
        {
            btn_OK.Attributes.Add("onclick", "return CheckInput('0')");
            TokenValidate.IsRedircet = true;
            TokenValidate.Validate();
            if (CommonBizRules.IsUrlParams(HttpContext.Current.Request.Url.OriginalString))
            {
                SPID      = HttpUtility.HtmlDecode(Request.QueryString["SPID"].ToString());
                ReturnUrl = HttpUtility.HtmlDecode(Request.QueryString["ReturnUrl"].ToString());
            }
            CustID = TokenValidate.CustID;

            //语言密码为空
            if (PassWordBO.VoicePwdIsNull(CustID, out ErrMsg))
            {
                Label1.Text     = "输入登录密码";
                error.InnerHtml = "提示:您未设置过语音密码 请输入登录密码";
            }
        }
    }
Пример #21
0
    protected void btnlogin_ServerClick(object sender, EventArgs e)
    {
        string ErrMeg = "";
        string er     = "";

        TokenValidate.IsRedircet = true;
        TokenValidate.Validate();
        CustID = TokenValidate.CustID;

        if (ddlQuestion1.SelectedIndex != 0 && txtAnswer1.Text.Trim().Length > 0)
        {
            PassWordBO.UpdatePwdQuestionAnswer(txtHidSq1.Text, CustID, ddlQuestion1.SelectedIndex, txtAnswer1.Text, out er);
            ErrMeg = ErrMeg + er;
        }

        if (ddlQuestion2.SelectedIndex != 0 && txtAnswer2.Text.Trim().Length > 0)
        {
            PassWordBO.UpdatePwdQuestionAnswer(txtHidSq2.Text, CustID, ddlQuestion2.SelectedIndex, txtAnswer2.Text, out er);
            ErrMeg = ErrMeg + er;
        }

        if (ddlQuestion3.SelectedIndex != 0 && txtAnswer3.Text.Trim().Length > 0)
        {
            PassWordBO.UpdatePwdQuestionAnswer(txtHidSq3.Text, CustID, ddlQuestion3.SelectedIndex, txtAnswer3.Text, out er);
            ErrMeg = ErrMeg + er;
        }

        CommonBizRules.SuccessRedirect("", "问题设置成功", this.Context);
        //if (ErrMeg == "")
        //{
        //    Context.Server.Transfer("verifyPasswordQnA.aspx");
        //}
        //else {
        //    Context.Server.Transfer("verifyPasswordQnA.aspx");
        //}
    }
Пример #22
0
        public void OnAuthorization(AuthorizationFilterContext context)
        {
            //string acc = "*****@*****.**";
            //DateTime extime = DateTime.Now.AddHours(24);
            //string tok = TokenValidate.EncryptToken(acc, extime);
            //bool chk = TokenValidate.VerifyToken(tok);

            var ss = context.HttpContext.Request.Body;

            //using (StreamReader reader = new StreamReader(ss, System.Text.Encoding.UTF8))
            //{
            //    var content = reader.ReadToEndAsync();

            //    var obj = Newtonsoft.Json.Linq.JObject.Parse(content);



            //}

            ApiResultModel result = new ApiResultModel();

            //from swagger test
            string token = token = context.HttpContext.Request.Query["Authorization"];

            if (string.IsNullOrWhiteSpace(token))
            {
                //from client request
                token = context.HttpContext.Request.Headers.Where(x => x.Key.Equals("Authorization")).FirstOrDefault().Value;
            }

            if (string.IsNullOrWhiteSpace(token))
            {
                result.Code = (int)ApiResultModel.CodeEnum.IllegalToken;
                _logger.LogError(result.Message);
                context.Result = new JsonResult(result);
            }
            else
            {
                #region flyshow version validate
                string[] accountAndLoginTime = GetDecryptData(token);
                string   account             = accountAndLoginTime[0];

                //check token date
                if (!TokenValidate.VerifyToken(accountAndLoginTime[1]))
                {
                    //fail
                    result.Code = (int)ApiResultModel.CodeEnum.IllegalToken;
                    _logger.LogError(result.Message);
                    context.Result = new JsonResult(result);
                }

                // check account exists
                if (!_userService.IsAccountExists(accountAndLoginTime[0]))
                {
                    result.Code = (int)ApiResultModel.CodeEnum.AccountNotExist;
                    _logger.LogError(result.Message);
                    context.Result = new JsonResult(result);
                }

                #endregion

                #region tmp
                //                //Get header->Authorization
                //var Token = context.HttpContext.Request.Headers.Authorization.Parameter;
                //                string UserId;
                //                string DepartmentCD;
                //                string AccountType;
                //                TokenValidate tokenval = new TokenValidate();
                //                if (string.IsNullOrWhiteSpace(tokenval.CheckTokenIsRenew(Token, out UserId, out DepartmentCD, out AccountType, false)))
                //                {
                //                    var basecontroller = (_BaseController)actionContext.ControllerContext.Controller;
                //                    //權限:依UserID+Action去DB中取得相對應權限(可否Call Controller的權限)
                //#if !NOAUTH
                //                    IAuthorityService auth = new AuthorityService();
                //                    basecontroller._authState.IsAuth = auth.CheckActorPermission(UserId, controllerName);
                //#else
                //                                    basecontroller._authState.IsAuth = true;
                //#endif
                //                    basecontroller._authState.UserID = UserId;
                //                    basecontroller._authState.DepartmentCD = DepartmentCD;
                //                    basecontroller._authState.AccountType = AccountType;
                //                }
                #endregion
            }
        }
Пример #23
0
    protected void Page_Load(object sender, EventArgs e)
    {
        //bool IsHttps = HttpContext.Current.Request.IsSecureConnection;
        //if (!IsHttps)
        //{

        //    String AbsoluteUri = HttpContext.Current.Request.Url.AbsoluteUri;     //http://localhost/CIP2UserPortal/SSO/YiYou_Login.aspx
        //    if (AbsoluteUri.Contains("8081"))
        //    {
        //        Response.Redirect("https://customer.besttone.com.cn:8443/SSO/YiYou_Login.aspx?SPTokenRequest=" + Request["SPTokenRequest"]);
        //    }
        //    else
        //    {
        //        Response.Redirect("https://customer.besttone.com.cn/UserPortal/SSO/YiYou_Login.aspx?SPTokenRequest=" + Request["SPTokenRequest"]);
        //    }
        //}

        Response.AddHeader("P3P", "CP=CAO PSA OUR");

        if (Request.Cookies.Get("LoginTabCookie") != null)
        {
            LoginTabCookieValue = Request.Cookies.Get("LoginTabCookie").Value;
        }

        StringBuilder strLog = new StringBuilder();

        //判断并解析SPTokenRequest参数
        ParseSPTokenRequest();
        //生成udb请求参数,注意CreateUdbPassportLoginRequest()方法必须放在ParseSPTokenRequst()后面
        String UDBorUnifyPlatform = String.Empty;

        try
        {
            SqlConnection conn = new SqlConnection(DBUtility.BestToneCenterConStr);
            StringBuilder sql  = new StringBuilder();
            sql.Append("select platform_name from udb_authen_platform where flag=1 ");   // 1生效  0 失效
            SqlCommand cmd = new SqlCommand(sql.ToString(), conn);
            using (conn)
            {
                conn.Open();
                SqlDataReader reader = cmd.ExecuteReader();
                while (reader.Read())
                {
                    UDBorUnifyPlatform = (String)reader["platform_name"];
                }
            }
        }
        catch (Exception ex)
        {
            UDBorUnifyPlatform = System.Configuration.ConfigurationManager.AppSettings["UDBorUnifyPlatform"];
        }
        strLog.AppendFormat("UDBorUnifyPlatform:{0}", UDBorUnifyPlatform);
        log(strLog.ToString());
        if (!String.IsNullOrEmpty(UDBorUnifyPlatform))
        {
            if (UDBorUnifyPlatform.ToLower().Equals("unifyplatform"))
            {
                CreateUnifyPlatformLoginRequest();
            }
            else
            {
                CreateUdbPassportLoginRequest();
            }
        }
        else
        {
            CreateUdbPassportLoginRequest();
        }
        //login189Url = Request["login189Url"];
        //已登录流程
        TokenValidate.IsRedircet = false;
        TokenValidate.Validate();
        if (TokenValidate.Result == 0)
        {
            this.ssoFunc();
        }
        else if (CommonUtility.IsParameterExist("NeedLogin", this.Page))
        {
            //不需要客户认证平台登陆
            if (!"0".Equals(Request["NeedLogin"]))
            {
                Response.Redirect(ReturnURL + "?NeedLogin=1");
            }
        }
    }
Пример #24
0
    protected void Submit1_Click(object sender, EventArgs e)
    {
        Response.AddHeader("P3P", "CP=CAO PSA OUR");
        string AuthenType = HttpUtility.HtmlDecode(Request.Form["AuthenType"].ToString().Trim().ToUpper());

        strLog.AppendFormat("AuthenType:{0}\r\n", AuthenType);
        PageUtility.SetCookie("AuthenType", AuthenType, 168);           //168个小时,即一个礼拜
        string AuthenName  = Request.Form["username"];
        string Password    = Request.Form["password"];
        string CustID      = "";
        string RealName    = "";
        string NickName    = "";
        string UserName    = "";
        string OutID       = "";
        string UserAccount = "";
        string CustType    = "";
        string ProvinceID  = UAProvinceID;

        try {
            strLog.AppendFormat("checkCode={0}", Request.Form["checkCode"]);
            if (!CommonUtility.ValidateValidateCode(HttpUtility.HtmlDecode(Request.Form["checkCode"].ToString().Trim()), this.Context))
            {
                errorHint.InnerHtml = "验证码错误,请重新输入";
                return;
            }
            strLog.Append("验证码校验通过\r\n");
            strLog.AppendFormat("【开始验证】:SPID:{0},ProvinceID:{1},AuthenName:{2},AuthenType:{3}\r\n", SPID, ProvinceID, AuthenName, AuthenType);
            Result = UserAuthV2(SPID, AuthenName, AuthenType, Password, Context, ProvinceID, "", "",
                                out ErrMsg, out CustID, out UserAccount, out CustType, out OutID, out ProvinceID, out RealName, out UserName, out NickName);
            //验证结果日志
            strLog.AppendFormat("【验证结果】:CustID:{0},UserAcount:{1},CustType:{2},OutID:{3},ProvinceID:{4},RealName:{5},UserName:{6},NickName:{7},Result:{8},ErrMsg:{9}\r\n",
                                CustID, UserAccount, CustType, OutID, ProvinceID, RealName, UserName, NickName, Result, ErrMsg);
            CommonBizRules.WriteDataCustAuthenLog(SPID, CustID, ProvinceID, AuthenType, AuthenName, "2", Result, ErrMsg);
            if (Result != 0)
            {
                if (Result == 1001 || Result == -20504 || Result == -21553)
                {
                    errorHint.InnerHtml = ErrMsg;
                    //hint_Username.InnerHtml = "";
                    return;
                }

                if (Result == -21501)
                {
                    errorHint.InnerHtml = ErrMsg;
                    return;
                }
                Response.Write(ErrMsg);
                return;
            }

            SPInfoManager spInfo = new SPInfoManager();
            Object        SPData = spInfo.GetSPData(this.Context, "SPData");
            string        key    = spInfo.GetPropertyBySPID("35000000", "SecretKey", SPData);

            //生成token并保存
            UserToken UT             = new UserToken();
            string    UserTokenValue = UT.GenerateUserToken(CustID, RealName, UserName, NickName, OutID, CustType, AuthenName, AuthenType, key, out ErrMsg);
            string    CookieName     = System.Configuration.ConfigurationManager.AppSettings["CookieName"];
            //PageUtility.SetCookie(UserTokenValue, CookieName, this.Page);
            PageUtility.SetCookie(CookieName, UserTokenValue);

            TokenValidate.IsRedircet = false;

            TokenValidate.Validate();

            this.ssoFunc();
        }
        catch (System.Exception ex)
        {
            strLog.AppendFormat(ex.ToString() + "\r\n");
        }finally{
            log(strLog.ToString());
        }
    }
Пример #25
0
    protected void auth_Click(object sender, EventArgs e)
    {
        string AuthenType = HttpUtility.HtmlDecode(Request.Form["AuthenType"].ToString().Trim().ToUpper());         //获取认证类型
        string password   = Request.Form["password"].ToString().Trim();
        string username   = Request.Form["username"].ToString().Trim();

        // 按照模式匹配出,认证模式 (手机,用户名,商旅卡,邮箱)认证
        // 如果认证通过,返回custid
        // 绑定 custid和openid

        PageUtility.SetCookie("AuthenType", AuthenType, 168);           //168个小时,即一个礼拜
        string AuthenName  = username;
        string Password    = password;
        string CustID      = "";
        string RealName    = "";
        string NickName    = "";
        string UserName    = "";
        string OutID       = "";
        string UserAccount = "";
        string CustType    = "";
        string ProvinceID  = "";
        string ErrMsg      = "";
        int    Result;

        //日志
        log(String.Format("【开始验证】:SPID:{0},ProvinceID:{1},AuthenName:{2},AuthenType:{3}", SPID, ProvinceID, AuthenName, AuthenType));

        Result = BTForBusinessSystemInterfaceRules.UserAuthV2(SPID, AuthenName, AuthenType, Password, Context, ProvinceID, "", "",
                                                              out ErrMsg, out CustID, out UserAccount, out CustType, out OutID, out ProvinceID, out RealName, out UserName, out NickName);
        //验证结果日志
        log(String.Format("【验证结果】:CustID:{0},UserAcount:{1},CustType:{2},OutID:{3},ProvinceID:{4},RealName:{5},UserName:{6},NickName:{7}",
                          CustID, UserAccount, CustType, OutID, ProvinceID, RealName, UserName, NickName));
        CommonBizRules.WriteDataCustAuthenLog(SPID, CustID, ProvinceID, AuthenType, AuthenName, "2", Result, ErrMsg);
        if (Result != 0)
        {
            if (Result == 1001 || Result == -20504 || Result == -21553)
            {
                errorHint.InnerHtml = ErrMsg;
                return;
            }

            if (Result == -21501)
            {
                errorHint.InnerHtml = ErrMsg;
                return;
            }
            Response.Write(ErrMsg);
            return;
        }

        // 绑定custid 和code关系   begin
        string        _connectionString = WebConfigurationManager.ConnectionStrings["BestToneCenterConStr"].ConnectionString;
        int           result            = -1;
        SqlConnection con = new SqlConnection(_connectionString);
        SqlCommand    cmd = new SqlCommand("insert into oauthaccount (openid,custid,createtime,status) values (@code,@CustID,getdate(),@oauthtype)", con);

        cmd.Parameters.Add("@code", SqlDbType.NVarChar, 50).Value     = code;
        cmd.Parameters.Add("@CustID", SqlDbType.NVarChar, 16).Value   = CustID;
        cmd.Parameters.Add("@oauthtype", SqlDbType.NVarChar, 1).Value = oauthtype;

        using (con)
        {
            con.Open();
            result = cmd.ExecuteNonQuery();
        }
        //end
        if (result != 0)
        {
            errorHint.InnerHtml = "绑定关系建立失败";
            return;
        }

        SPInfoManager spInfo = new SPInfoManager();
        Object        SPData = spInfo.GetSPData(this.Context, "SPData");
        string        key    = spInfo.GetPropertyBySPID("35000000", "SecretKey", SPData);

        //生成token并保存
        UserToken UT             = new UserToken();
        string    UserTokenValue = UT.GenerateUserToken(CustID, RealName, UserName, NickName, OutID, CustType, AuthenName, AuthenType, key, out ErrMsg);
        string    CookieName     = System.Configuration.ConfigurationManager.AppSettings["CookieName"];

        //PageUtility.SetCookie(UserTokenValue, CookieName, this.Page);
        PageUtility.SetCookie(CookieName, UserTokenValue);
        TokenValidate.IsRedircet = false;
        TokenValidate.Validate();
        this.ssoFunc();
    }
Пример #26
0
        public Startup(IHostingEnvironment env)
        {
            // Before we load the custom library (at: "ADefHelpDeskApp\ADefHelpDeskApp.dll")
            // (and potentially lock it)
            // Determine if we have files in the Upgrade directory and process them first
            // Copy all files from ProcessDirectory to the final location
            UpdateApplication objUpdateApplication = new UpdateApplication(env);

            objUpdateApplication.ProcessDirectory("");
            // Delete files in Process Directory so they wont be processed again
            objUpdateApplication.DeleteProcessDirectory();

            var builder = new ConfigurationBuilder()
                          .SetBasePath(env.ContentRootPath)
                          .AddJsonFile("appsettings.json", optional: true, reloadOnChange: true)
                          .AddJsonFile($"appsettings{env.EnvironmentName}.json", optional: true)
                          .AddEnvironmentVariables();

            Configuration = builder.Build();

            // **** JWT Token Configuration
            string SecurityKey = "tempKey*****************##############";

            try
            {
                SecurityKey =
                    TokenValidate.GetSecretKey(Configuration.GetSection("ConnectionStrings:DefaultConnection").Value);
            }
            catch
            {
                // Do nothing
                // The database is just not set up yet
            }

            _signingKey =
                new SymmetricSecurityKey(
                    Encoding.ASCII.GetBytes(SecurityKey));

            _tokenValidationParameters = new TokenValidationParameters
            {
                // The signing key must match!
                ValidateIssuerSigningKey = true,
                IssuerSigningKey         = _signingKey,
                // Validate the JWT Issuer (iss) claim
                ValidateIssuer = true,
                ValidIssuer    = Configuration.GetSection("TokenAuthentication:Issuer").Value,
                // Validate the JWT Audience (aud) claim
                ValidateAudience = true,
                ValidAudience    = Configuration.GetSection("TokenAuthentication:Audience").Value,
                // Validate the token expiry
                ValidateLifetime = true,
                // If you want to allow a certain amount of clock drift, set that here:
                ClockSkew = TimeSpan.Zero
            };

            _tokenProviderOptions = new TokenProviderOptions
            {
                Path               = Configuration.GetSection("TokenAuthentication:TokenPath").Value,
                Audience           = Configuration.GetSection("TokenAuthentication:Audience").Value,
                Issuer             = Configuration.GetSection("TokenAuthentication:Issuer").Value,
                SigningCredentials = new SigningCredentials(_signingKey, SecurityAlgorithms.HmacSha256),
                IdentityResolver   = GetIdentity
            };
        }
Пример #27
0
    protected void login_Click(object sender, EventArgs e)
    {
        Response.AddHeader("P3P", "CP=CAO PSA OUR");
        StringBuilder strLog = new StringBuilder();
        //string AuthenType = HttpUtility.HtmlDecode(Request.Form["AuthenType"].ToString().Trim().ToUpper());         //获取认证类型

        string AuthenName = username.Text;
        string Password   = password.Text;
        string AuthenType = "1";  // 默认是用户名

        Regex regMobile = new Regex(@"^1[3458]\d{9}$");
        Regex regEmail  = new Regex(@"^[0-9a-zA-Z_\-\.]*[0-9a-zA-Z_\-]@[0-9a-zA-Z]+\.+[0-9a-zA-Z_\-.]+$");
        Regex regCard   = new Regex(@"^(\d{9}|\d{16})$");

        if (regMobile.IsMatch(AuthenName))
        {
            AuthenType = "2";
        }
        if (regEmail.IsMatch(AuthenName))
        {
            AuthenType = "4";
        }
        if (regCard.IsMatch(AuthenName))
        {
            AuthenType = "3";
        }


        PageUtility.SetCookie("AuthenType", AuthenType, 168);           //168个小时,即一个礼拜


        string CustID      = "";
        string RealName    = "";
        string NickName    = "";
        string UserName    = "";
        string OutID       = "";
        string UserAccount = "";
        string ErrMsg      = "";
        string CustType    = "";
        string ProvinceID  = "";
        int    Result      = 1;

        try
        {
            strLog.AppendFormat("checkCode={0}", Request.Form["checkCode"]);
            if (!CommonUtility.ValidateValidateCode(HttpUtility.HtmlDecode(Request.Form["checkCode"].ToString().Trim()), this.Context))
            {
                errorHint.InnerHtml = "验证码错误,请重新输入";
                return;
            }

            //日志
            strLog.AppendFormat("【开始验证】:SPID:{0},ProvinceID:{1},AuthenName:{2},AuthenType:{3}", SPID, ProvinceID, AuthenName, AuthenType);

            Result = BTForBusinessSystemInterfaceRules.UserAuthV2(SPID, AuthenName, AuthenType, Password, Context, ProvinceID, "", "",
                                                                  out ErrMsg, out CustID, out UserAccount, out CustType, out OutID, out ProvinceID, out RealName, out UserName, out NickName);
            //验证结果日志
            strLog.AppendFormat("【验证结果】:CustID:{0},UserAcount:{1},CustType:{2},OutID:{3},ProvinceID:{4},RealName:{5},UserName:{6},NickName:{7}",
                                CustID, UserAccount, CustType, OutID, ProvinceID, RealName, UserName, NickName);
            CommonBizRules.WriteDataCustAuthenLog(SPID, CustID, ProvinceID, AuthenType, AuthenName, "2", Result, ErrMsg);
            if (Result != 0)
            {
                if (Result == 1001 || Result == -20504 || Result == -21553)
                {
                    errorHint.InnerHtml = ErrMsg;
                    //hint_Username.InnerHtml = "";
                    return;
                }

                if (Result == -21501)
                {
                    errorHint.InnerHtml = ErrMsg;
                    return;
                }
                Response.Write(ErrMsg);
                return;
            }

            SPInfoManager spInfo = new SPInfoManager();
            Object        SPData = spInfo.GetSPData(this.Context, "SPData");
            string        key    = spInfo.GetPropertyBySPID("35000000", "SecretKey", SPData);

            //生成token并保存
            UserToken UT             = new UserToken();
            string    UserTokenValue = UT.GenerateUserToken(CustID, RealName, UserName, NickName, OutID, CustType, AuthenName, AuthenType, key, out ErrMsg);
            string    CookieName     = System.Configuration.ConfigurationManager.AppSettings["CookieName"];
            PageUtility.SetCookie(CookieName, UserTokenValue);

            TokenValidate.IsRedircet = false;
            TokenValidate.Validate();

            this.ssoFunc();
        }
        catch (System.Exception ex)
        {
            log(ex.ToString());
        }
        finally
        {
            log(strLog.ToString());
        }
    }
Пример #28
0
    protected void Page_Load(object sender, EventArgs e)
    {
        //bool IsHttps = HttpContext.Current.Request.IsSecureConnection;
        //if (!IsHttps)
        //{

        //    String AbsoluteUri = HttpContext.Current.Request.Url.AbsoluteUri;     //http://localhost/CIP2UserPortal/SSO/YiYou_Login.aspx
        //    if (AbsoluteUri.Contains("8081"))
        //    {
        //        Response.Redirect("https://customer.besttone.com.cn:8443/SSO/YiYou_Login.aspx?SPTokenRequest=" + Request["SPTokenRequest"]);
        //    }
        //    else
        //    {
        //        Response.Redirect("https://customer.besttone.com.cn/UserPortal/SSO/YiYou_Login.aspx?SPTokenRequest=" + Request["SPTokenRequest"]);
        //    }
        //}

        Response.AddHeader("P3P", "CP=CAO PSA OUR");

        if (Request.Cookies.Get("LoginTabCookie") != null)
        {
            LoginTabCookieValue = Request.Cookies.Get("LoginTabCookie").Value;
        }

        StringBuilder strLog = new StringBuilder();

        //判断并解析SPTokenRequest参数
        ParseSPTokenRequest();
        //生成udb请求参数,注意CreateUdbPassportLoginRequest()方法必须放在ParseSPTokenRequst()后面
        String UDBorUnifyPlatform = System.Configuration.ConfigurationManager.AppSettings["UDBorUnifyPlatform"];

        if (!String.IsNullOrEmpty(UDBorUnifyPlatform))
        {
            if (UDBorUnifyPlatform.ToLower().Equals("unifyplatform"))
            {
                CreateUnifyPlatformLoginRequest();
            }
            else
            {
                CreateUdbPassportLoginRequest();
            }
        }
        else
        {
            CreateUdbPassportLoginRequest();
        }
        //login189Url = Request["login189Url"];
        //已登录流程
        TokenValidate.IsRedircet = false;
        TokenValidate.Validate();
        if (TokenValidate.Result == 0)
        {
            this.ssoFunc();
        }
        else if (CommonUtility.IsParameterExist("NeedLogin", this.Page))
        {
            //不需要客户认证平台登陆
            if (!"0".Equals(Request["NeedLogin"]))
            {
                Response.Redirect(ReturnURL + "?NeedLogin=1");
            }
        }
    }
Пример #29
0
    protected void btnlogin_Click(object sender, EventArgs e)
    {
        string AuthenType = ddlAuthenTypeList.SelectedValue;

        PageUtility.SetCookie("AuthenType", AuthenType, 168);           //168个小时,即一个礼拜
        string AuthenName  = txtUsername.Text;
        string Password    = txtPassword.Text;
        string CustID      = "";
        string RealName    = "";
        string NickName    = "";
        string UserName    = "";
        string OutID       = "";
        string UserAccount = "";
        string ErrMsg      = "";
        string CustType    = "";
        string ProvinceID  = "";
        int    Result      = 1;

        if (!CommonUtility.ValidateValidateCode(HttpUtility.HtmlDecode(Request.Form["code"].ToString().Trim().ToUpper()), this.Context))
        {
            err_code.InnerHtml = "验证码错误,请重新输入";

            return;
        }

        //日志
        log(String.Format("【开始验证】:SPID:{0},ProvinceID:{1},AuthenName:{2},AuthenType:{3}", SPID, ProvinceID, AuthenName, AuthenType));

        Result = BTForBusinessSystemInterfaceRules.UserAuthV2(SPID, AuthenName, AuthenType, Password, Context, ProvinceID, "", "",
                                                              out ErrMsg, out CustID, out UserAccount, out CustType, out OutID, out ProvinceID, out RealName, out UserName, out NickName);
        //验证结果日志
        log(String.Format("【验证结果】:CustID:{0},UserAcount:{1},CustType:{2},OutID:{3},ProvinceID:{4},RealName:{5},UserName:{6},NickName:{7}",
                          CustID, UserAccount, CustType, OutID, ProvinceID, RealName, UserName, NickName));
        CommonBizRules.WriteDataCustAuthenLog(SPID, CustID, ProvinceID, AuthenType, AuthenName, "2", Result, ErrMsg);
        if (Result != 0)
        {
            if (Result == 1001 || Result == -20504 || Result == -21553)
            {
                err_Username.InnerHtml  = ErrMsg;
                hint_Username.InnerHtml = "";
                return;
            }

            if (Result == -21501)
            {
                err_Password.InnerHtml = ErrMsg;
                return;
            }
            Response.Write(ErrMsg);
            return;
        }

        SPInfoManager spInfo = new SPInfoManager();
        Object        SPData = spInfo.GetSPData(this.Context, "SPData");
        string        key    = spInfo.GetPropertyBySPID("35000000", "SecretKey", SPData);

        //生成token并保存
        UserToken UT             = new UserToken();
        string    UserTokenValue = UT.GenerateUserToken(CustID, RealName, UserName, NickName, OutID, CustType, AuthenName, AuthenType, key, out ErrMsg);
        string    CookieName     = System.Configuration.ConfigurationManager.AppSettings["CookieName"];

        PageUtility.SetCookie(UserTokenValue, CookieName, this.Page);

        TokenValidate.IsRedircet = false;

        TokenValidate.Validate();

        this.ssoFunc();
    }
Пример #30
0
    protected void btn_OK_Click(object sender, EventArgs e)
    {
        if (CommonBizRules.IsUrlParams(HttpContext.Current.Request.Url.OriginalString))
        {
            SPID      = HttpUtility.HtmlDecode(Request.QueryString["SPID"].ToString());
            ReturnUrl = HttpUtility.HtmlDecode(Request.QueryString["ReturnUrl"].ToString());
        }

        if (!CommonUtility.ValidateValidateCode(HttpUtility.HtmlDecode(Request.Form["code"].ToString().Trim().ToUpper()), this.Context))
        {
            err_code.InnerHtml = "验证码错误,请重新输入";
            return;
        }
        //TokenValidate.IsRedircet = false;
        TokenValidate.Validate();
        CustID = TokenValidate.CustID;

        OldPwd    = Request.Form["oldPasswd"].ToString().Trim();
        VerifyPwd = Request.Form["verifyPasswd"].ToString().Trim();

        //语言密码为空
        if (PassWordBO.VoicePwdIsNull(CustID, out ErrMsg))
        {
            Label1.Text = "输入登录密码";
            if (!PassWordBO.OldPwdIsRight(CustID, OldPwd, "2", out ErrMsg))
            {
                //CommonBizRules.ErrorHappenedRedircet(-1, ErrMsg, "修改语音密码", this.Context);
                err_code.InnerHtml = "";
                error.InnerHtml    = "原始密码错误";
                return;
            }
            else
            {
                string ErrMsgSetPwd = "";
                int    Result       = PassWordBO.SetPassword(SPID, CustID, VerifyPwd, "1", "", out ErrMsgSetPwd);
                if (Result != 0)
                {
                    CommonBizRules.ErrorHappenedRedircet(Result, ErrMsgSetPwd, "修改语音密码", this.Context);
                }
                CommonBizRules.SuccessRedirect(ReturnUrl, "修改语音密码成功", this.Context);
            }
        }
        else
        {
            if (!PassWordBO.OldPwdIsRight(CustID, OldPwd, "1", out ErrMsg))
            {
                //CommonBizRules.ErrorHappenedRedircet(-1, ErrMsg, "修改语音密码", this.Context);
                error.InnerHtml = "原始密码错误";
                return;
            }
            else
            {
                string ErrMsgSetPwd = "";
                int    Result       = PassWordBO.SetPassword(SPID, CustID, VerifyPwd, "1", "", out ErrMsgSetPwd);
                if (Result != 0)
                {
                    CommonBizRules.ErrorHappenedRedircet(Result, ErrMsgSetPwd, "修改语音密码", this.Context);
                }
                CommonBizRules.SuccessRedirect(ReturnUrl, "修改语音密码成功", this.Context);
            }
        }
    }