WebApi的調用-3.Basic驗證

webapi里的特性

/// <summary>///  Basic驗證   /// </summary>/// <remarks>///     /// </remarks>public class BasicAuthorizeAttibute : AuthorizeAttribute{public override void OnAuthorization(HttpActionContext actionContext){var authorization = actionContext.Request.Headers.Authorization; //HTTP標頭的Authorization值//ActionDescriptor方法上，ActionDescriptor.ControllerDescriptor 類上//有[AllowAnonymousAttribute] 的情況下if (actionContext.ActionDescriptor.GetCustomAttributes<AllowAnonymousAttribute>(true).Count != 0|| actionContext.ActionDescriptor.ControllerDescriptor.GetCustomAttributes<AllowAnonymousAttribute>(true).Count != 0){base.OnAuthorization(actionContext);}else if (authorization != null && authorization.Parameter != null){//用戶邏輯驗證if (ValidateTicket(authorization.Parameter)){base.IsAuthorized(actionContext);}else{this.HandleUnauthorizedRequest(actionContext);}}else{this.HandleUnauthorizedRequest(actionContext);}}/// <summary>///  驗證用戶邏輯   /// </summary>/// <param name="encryptTicket" type="string">/// /// </param>/// private bool ValidateTicket(string encryptTicket){// var strTicket = FormsAuthentication.Decrypt(encryptTicket.Remove(encryptTicket.Length - 1).Remove(0, 1));var strTicket = FormsAuthentication.Decrypt(encryptTicket);return string.Equals(strTicket.UserData, string.Format("{0}&{1}", "admin", "123"));}}

獲取ticket

        [AllowAnonymous][HttpGet]public HttpResponseMessage Login(string account, string password){Model.User user = new User();if (account == "admin" && password == "123"){FormsAuthenticationTicket ticket = new FormsAuthenticationTicket(0, account, DateTime.Now,DateTime.Now.AddHours(1), true, string.Format("{0}&{1}", account, password),FormsAuthentication.FormsCookiePath);return Success(user = new User() { name = account, pass = password, ticket = FormsAuthentication.Encrypt(ticket) });}else{return Msg("登錄失敗");}}

MVC里面請求頭（后臺請求）

public string GetApi(string method, string queryString){var result = ApiHelper.Instance.RequestApi(method, queryString, GetApiHeader());return result;}private WebHeaderCollection GetApiHeader(){string key = string.Format(GlobalVar.UserTiketCacheKey);var result = CacheHelper.CacheReader(key);WebHeaderCollection header = new WebHeaderCollection();header.Add(HttpRequestHeader.Authorization, "BasicAuth " + result);return header;}