.net 的登陸驗證接口的實現

1.創建數據庫 User表：

---

2. 創建一個Model類 : User1.cs

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;

namespace MyApiTest.Models
{
    public class User1
    {

        public string UserName { get; set; }
        public string PassWord { get; set; }
      public Int32 ID { set; get; }
    }
}

---

3.創建一個控制器： UserAuthenAttribute.cs

using System.Web;
using System.Web.Mvc;
using System.Web.Mvc.Filters;
using MyApiTest.Models;


namespace MyApiTest.CustomAttributes
{
    public class UserAuthenAttribute : FilterAttribute, IAuthenticationFilter
    {
        //// GET: UserAuthenAttribute
        //public ActionResult Index()
        //{
        //    return View();
        //}

        public void OnAuthentication(AuthenticationContext filterContext)
        {
            //這個方法是在Action執行之前調用
            var user = filterContext.HttpContext.Session["User"];
            if (user == null)
            {
                //filterContext.HttpContext.Response.Redirect("/Account/Logon");
                var Url = new UrlHelper(filterContext.RequestContext);
                var url = Url.Action("LogState", "Login", new { area = "" });
                filterContext.Result = new RedirectResult(url);
            }
        }
        public void OnAuthenticationChallenge(AuthenticationChallengeContext filterContext)
        {
            //這個方法是在Action執行之後調用
        }

    }
}

---

4. 創建登陸控制器  LoginController.cs

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.Mvc;
using MyApiTest.Models;
using MySql.Data.MySqlClient;

namespace MyApiTest.Controllers
{
    public class LoginController : Controller
    {
        // GET: Login
        public ActionResult Index()
        {
            return View();
        }
        string strConn = System.Configuration.ConfigurationManager.AppSettings["ConnectionString"].ToString();

        #region State
        [HttpGet]
        public JsonResult LogState(User1 user)
        {
            //填充了Session 表示已有數據==已登錄
            //Session["User"] = user.UserName;   
            //Session["User"] = "niu";
            return Json(new { status = 1, msg = "還沒登陸" }, JsonRequestBehavior.AllowGet);
        } 
        #endregion

        #region Logon
        [HttpPost]
        public JsonResult Logon(string username, string password)
        {
            using (MySqlConnection con = new MySqlConnection(strConn))
            {
                //插入sql語句        
                string sqlStr = "select  UserName,PassWord,ID from Users where UserName='" + username + "' and PassWord='" + password + "'";
                List<User1> list = new List<User1>();
                using (MySqlCommand cmd = new MySqlCommand(sqlStr, con))
                {
                    con.Open();
                    MySqlDataReader dr = cmd.ExecuteReader();
                    while (dr.Read())
                    {

                        User1 model = new User1();
                        object obj;
                        obj = dr["UserName"];
                        if (obj != null && obj != DBNull.Value)
                        {
                            model.UserName = (string)obj;
                        }
                        model.UserName = dr["UserName"].ToString();
                        model.PassWord = dr["PassWord"].ToString();
                        model.ID = Convert.ToInt32(dr["ID"]);

                        list.Add(model);
                    }             
                        if (list != null && list.Count != 0)
                        {
                            Session["User"] = username;
                            return Json(new { status = 1, msg = "登陸succssfull", list = list }, JsonRequestBehavior.AllowGet);
                        }
                        else
                        {
                            return Json(new { status = 1, msg = "用戶名或密碼不正確" }, JsonRequestBehavior.AllowGet);
                        }
                }
            }
        } 
        #endregion
        #region 退出
        public ActionResult LogOff()
        {
            if (Session["User"] != null)
            {
                Session["User"] = null;
            }
            //這是在網頁中的做法，跳轉到登陸頁
            //return RedirectToAction("Logon");  

            //APP接口的方法，只要返回信息即可
            return Json(new { status = 1, msg = "退出成功" }, JsonRequestBehavior.AllowGet);
        }
     #endregion
    }
}

5. 最後在需要使用處使用

• 導入引用

using MyApiTest.CustomAttributes;

• 在使用的方法是上面調用

        #region Get方法  查詢數據 (提取Model，簡化使用)
        [HttpGet]
        //[CheckLogin]
        [UserAuthen]
        public JsonResult getMySQLHandel()
        {         
          return Json(new { status = 1, msg = "獲取成功", list = getdata() }, JsonRequestBehavior.AllowGet);
        }
        #endregion