从零开始实现asp.net MVC4框架网站的用户登录以及权限验证模块 详细教程

<authentication mode="Forms"> ?????<forms loginUrl="/Home/Login" timeout="2880"/></authentication>

 public class LoginModel ???{ ???????[Display(Name="用户名")] ???????[Required(ErrorMessage="用户名不能为空")] ???????public string UserName { get; set; } ????????[Display(Name="密码")] ???????[Required(ErrorMessage="密码不能为空")] ???????[DataType(DataType.Password)] ???????[RegularExpression(@"^\w+$", ErrorMessage = "密码格式有误,只能是字母数字或者下划线")] ?????????public string Password { get; set; } ?????????[Display(Name="记住登陆?")] ???????public bool RememberMe { get; set; } ????????public string Login() ???????{ ???????????//该方法应从数据库中对比用户名和密码,并取得用户权限列表 ???????????//这里为了简单直接对比字符串并返回权限列表,返回NULL则说明用户名或者密码错误 ???????????//权限列表即为用,分割的权限名称 ???????????string result = null; ????????????if (this.UserName == "guest" & this.Password == "guest") ???????????????result = "Add"; ????????????if (this.UserName == "admin" & this.Password == "admin") ???????????????result = "Add,Edit"; ????????????return result; ???????} ???}

using System.ComponentModel.DataAnnotations;

public class HomeController : Controller ???{ ???????// ???????// GET: /Home/ ????????public ActionResult Index() ???????{ ???????????ViewBag.Info = "该页面不含权限注解,所有人均可访问."; ???????????return View(); ???????} ???????????????[Authorize(Roles = "Edit")] //该注解表示只有包含Edit权限的用户才可以访问 ???????public ActionResult Edit() ???????{ ???????????ViewBag.Info = "该页面需要包含Edit权限的人才可访问."; ???????????return View(); ???????} ???????[Authorize(Roles = "Add")] //该注解表示只有包含Add权限的用户才可以访问 ???????public ActionResult Add() ???????{ ???????????ViewBag.Info = "该页面需要包含Add权限的人才可访问."; ???????????return View(); ???????} ???????[Authorize(Roles = "Add,Edit")] //该注解表示只有包含Add权限的用户才可以访问 ???????public ActionResult Show() ???????{ ???????????ViewBag.Info = "该页面需要包含Edit或者Add权限的人才可访问."; ???????????return View(); ???????} ???????public ActionResult Login(LoginModel model) ??????{ ??????????return View(); ??????} ???????[HttpPost] //该注解表示只接收Post数据 ??????[ValidateAntiForgeryToken]//该注解可以防止跨站攻击 ??????[ActionName("Login")]//该注解可以更改路由中Action名称 ??????public ActionResult LoginCheck(LoginModel model) ??????{ ??????????if (!ModelState.IsValid) ??????????{ ??????????????//用户输入服务端验证,此处处理验证不通过的提示代码 本例略过 ???????????????????????????return View(); ??????????} ???????????string result = model.Login(); ???????????if (result == null) ??????????{ ??????????????//用户名或者密码不正确的提示代码 本例略过 ??????????????return View(); ??????????} ??????????else ??????????{ ??????????????//用户登陆核心代码 ??????????????FormsAuthenticationTicket authTicket = new FormsAuthenticationTicket( ???????????????????1, ???????????????????model.UserName, ???????????????????DateTime.Now, ???????????????????DateTime.Now.AddHours(240),//记住密码的时间 ???????????????????model.RememberMe,//是否保存cookie 记住密码 ???????????????????result //获取的用户权限列表 用逗号分割的字符串 ???????????????????); ??????????????string encryptedTickt = FormsAuthentication.Encrypt(authTicket); ??????????????HttpCookie authCookie = new HttpCookie(FormsAuthentication.FormsCookieName, encryptedTickt); ??????????????Response.Cookies.Add(authCookie); ???????????????Response.Redirect("/Home", true); ??????????????ActionResult empty = new EmptyResult(); ??????????????return empty; ??????????} ??????????return View(); ??????}

using ChengChenXu.MVC4_Login_Demo.Models; //项目Model命名空间using System.Web.Security;

　　　　 <h1>@ViewBag.Info</h1><br /> ???????<a href="/home/login">登陆</a><br /> ???????<p>以下链接 登陆后才可以访问 未登陆时如果点击则会跳转到登陆页</p> ???????<a href="/home/add">添加页面</a><br /> ???????<a href="/home/edit">编辑页面</a><br /> ???????<a href="/home/show">查看页面</a><br />

　　　　 <h1>@ViewBag.Info</h1> ???????<a href="/home">返回</a><br />

@model ChengChenXu.MVC4_Login_Demo.Models.LoginModel

 　　　　　　 @using (Html.BeginForm()) ???????????{ ???????????????@Html.AntiForgeryToken() ????????????????????????????@Html.LabelFor(model=>model.UserName) ???????????????@Html.TextBoxFor(model => model.UserName) ???????????????<br /> ????????????????@Html.LabelFor(model=>model.Password) ???????????????@Html.PasswordFor(model => model.Password) ???????????????<br /> ????????????????????????????@Html.LabelFor(Model=>Model.RememberMe) ???????????????@Html.CheckBoxFor(model=>model.RememberMe) ???????????????<br /> ????????????????????????????<input type="submit" class="submit" tabindex="3" value="登录" /> ????????????}

 　　　　public MvcApplication() ???????{ ???????????AuthorizeRequest += new EventHandler(MvcApplication_AuthorizeRequest); ???????} ????????void MvcApplication_AuthorizeRequest(object sender, EventArgs e) ???????{ ???????????var id = Context.User.Identity as FormsIdentity; ???????????if (id != null && id.IsAuthenticated) ???????????{ ???????????????var roles = id.Ticket.UserData.Split(‘,‘); ???????????????Context.User = new GenericPrincipal(id, roles); ???????????} ???????}

using System.Web.Security;using System.Security.Principal;