.netMVC使用IPrincipal进行Form登录即权限验证（3）

public class UserData
 {
 /// 

 /// ID
 /// 
 public int UserId { get; set; }

 /// 

 /// 用户名
 /// 
 public string UserName { get; set; }

 /// 

 /// 角色ID列表
 /// 
 public List Roles { get; set; }
 }

public class Principal : IPrincipal
 {
 public IIdentity Identity { get; private set;}

 public UserData Account { get; set; }

 /// 

 /// 构造函数
 /// 
 /// 
 /// 
 public Principal(FormsAuthenticationTicket ticket, UserData account)
 {
  if (ticket == null)
  throw new ArgumentNullException("ticket");
  if (account == null)
  throw new ArgumentNullException("UserData");

  this.Identity = new FormsIdentity(ticket);
  this.Account = account;
 }

 public bool IsInRole(string role)
 {
  if (string.IsNullOrEmpty(role))
  return true;
  if (this.Account == null || this.Account.Roles == null)
  return false;
  return role.Split(',').Any(q => Account.Roles.Contains(int.Parse(q)));
 }
 }

/// 

 /// 写入COOKIE和读取COOKIE
 /// 
 public class HttpFormsAuthentication
 {
 //将用户信息通过ticket加密保存到COOKIE
 public static void SetAuthenticationCoolie(UserData account, int rememberDay = 0)
 {
  if (account == null)
  throw new ArgumentNullException("account");

  //序列化account对象
  string accountJson = JsonConvert.SerializeObject(account);
  //创建用户票据
  var ticket = new FormsAuthenticationTicket(1, account.UserName, DateTime.Now, DateTime.Now.AddDays(rememberDay), false, accountJson);
  //加密
  string encryptAccount = FormsAuthentication.Encrypt(ticket);

  //创建COOKIE
  var COOKIE = new HttpCOOKIE(FormsAuthentication.FormsCOOKIEName, encryptAccount)
  {
  HttpOnly= true,
  Secure = FormsAuthentication.RequireSSL,
  Domain = FormsAuthentication.COOKIEDomain,
  Path = FormsAuthentication.FormsCOOKIEPath
  };

  if (rememberDay > 0)
  COOKIE.Expires = DateTime.Now.AddDays(rememberDay);

  //写入COOKIE
  HttpContext.Current.Response.COOKIEs.Remove(COOKIE.Name);
  HttpContext.Current.Response.COOKIEs.Add(COOKIE);
 }

 //获取COOKIE并解析出用户信息
 public static Principal TryParsePrincipal(HttpContext context)
 {
  if (cOntext== null)
  throw new ArgumentNullException("context");
  HttpRequest request = context.Request;
  HttpCOOKIE COOKIE = request.COOKIEs[FormsAuthentication.FormsCOOKIEName];
  if (COOKIE == null || string.IsNullOrEmpty(COOKIE.Value))
  {
  return null;
  }
  //解密coolie值
  FormsAuthenticationTicket ticket = FormsAuthentication.Decrypt(COOKIE.Value);

  UserData account = JsonConvert.DeserializeObject(ticket.UserData);
  return new Principal(ticket, account);
 }

 }

protected void Application_PostAuthenticateRequest(object sender, System.EventArgs e)
 {
  HttpContext.Current.User =
  HttpFormsAuthentication.TryParsePrincipal(HttpContext.Current);
 }

public class FormAuthorizeAttribute : AuthorizeAttribute
 {
 /// 

 /// 先进入此方法，此方法中会调用 AuthorizeCore 验证逻辑，验证不通过会调用 HandleUnauthorizedRequest 方法
 /// 
 /// 
 public override void OnAuthorization(AuthorizationContext filterContext)
 {
  base.OnAuthorization(filterContext);
 }

 /// 

 /// 权限验证
 /// 
 /// 
 /// 
 protected override bool AuthorizeCore(HttpContextBase httpContext)
 {
  var user = httpContext.User as Principal;
  if (user != null)
  return user.IsInRole(base.Roles);
  return false;
 }

 protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext)
 {
  //验证不通过，直接跳转到相应页面，注意：如果不是哟娜那个以下跳转，则会继续执行Action方法
  filterContext.Result = new RedirectResult("~/Login/Index");
 }
 }

namespace MVCAuthorizeTest.Controllers
{
 public class LoginController : Controller
 {
 [AllowAnonymous]
 // GET: Login
 public ActionResult Index(string returnUrl)
 {
  ViewBag.ReturnUrl = returnUrl;
  return View();
 }

 [HttpPost]
 [AllowAnonymous]
 public ActionResult Index(string name, string password, bool rememberMe, string returnUrl)
 {
  var account = new UserData()
  {
  UserName = name,
  UserId = 110,
  Roles = new List() { 1, 2, 3 }
  };
  HttpFormsAuthentication.SetAuthenticationCoolie(account, rememberMe &＃63; 7 : 0);
  if (Url.IsLocalUrl(returnUrl) && returnUrl.Length > 1 && returnUrl.StartsWith("/") && !returnUrl.StartsWith("//") && !returnUrl.StartsWith("/\\"))
  {
  return Redirect(returnUrl);
  }
  else
  {
  return RedirectToAction("Index", "Home");
  }
 }

 // POST: /Account/LogOff
 [HttpPost]
 public ActionResult LogOff()
 {
  System.Web.Security.FormsAuthentication.SignOut();
  return RedirectToAction("Index", "Home");
 }
 }
}

 [FormAuthorize(Roles = "1,2")]
 public class HomeController : Controller
 {
 [FormAuthorize]
 public ActionResult Index()
 {
  return View();
 }
 }

public class FilterConfig
 {
 public static void RegisterGlobalFilters(GlobalFilterCollection filters)
 {
 filters.Add(new HandleErrorAttribute());
 //全局注册filter
 filters.Add(new FormAuthorizeAttribute());
 }
 }