.net mvc結合微軟提供的FormsAuthenticationTicket登陸

一、Web.config

  <system.web><compilation debug="true" targetFramework="4.5" /><httpRuntime targetFramework="4.5" /><authentication mode="Forms"><forms loginUrl="/Sign/SignIn" defaultUrl="/Home/Index" /></authentication></system.web>

二、SignController（主要實現）

    /// <summary>/// 登陸、注銷功能/// </summary>public class SignController : Controller{/// <summary>/// 登陸頁面/// </summary>/// <returns></returns>
        [AllowAnonymous]public ActionResult SignIn(){var isAuthenticated = System.Web.HttpContext.Current.User.Identity.IsAuthenticated;if (isAuthenticated) //已經驗證用戶
            {return Redirect(FormsAuthentication.DefaultUrl);}var reUrl = FormsAuthentication.GetRedirectUrl(HttpContext.User.Identity.Name, false);ViewBag.RedirectUrl = reUrl;return View();}/// <summary>/// 登陸功能/// </summary>/// <param name="userName">用戶名</param>/// <param name="pwd">密碼</param>/// <returns></returns>
        [HttpPost][AllowAnonymous]public JsonResult LogIn(string userName, string pwd){if (!string.IsNullOrEmpty(userName) && !string.IsNullOrEmpty(pwd)){var ticket = new FormsAuthenticationTicket(2, userName, DateTime.Now, DateTime.Now.AddMinutes(1), false, userName + pwd);string hashTicket = FormsAuthentication.Encrypt(ticket);var userCookie = new HttpCookie(FormsAuthentication.FormsCookieName, hashTicket);HttpContext.Response.Cookies.Add(userCookie);        //添加cookiesvar identity = new FormsIdentity(ticket);HttpContext.User = new CustomPrincipal(identity);       //獲取請求信息，通過自定義標志（重點）return Json(1);}elsereturn Json(0);}/// <summary>/// 注銷/// </summary>/// <returns></returns>
        [AllowAnonymous]public ActionResult SignOut(){FormsAuthentication.SignOut();return Redirect(FormsAuthentication.LoginUrl);}}

model

    /// <summary>/// 定義用戶對象的基本功能（自定義）/// </summary>public class CustomPrincipal : IPrincipal{#region 字段private IIdentity _identity;#endregion#region 屬性public IIdentity Identity{get { return _identity; }}#endregion#region 構造函數public CustomPrincipal(IIdentity identity){_identity = identity;}#endregion#region 方法public bool IsInRole(string role){throw new NotImplementedException();}#endregion}

view

@{ViewBag.Title = "SignIn";
}<h2>SignIn</h2>
<a href="@Url.Action("Index", "Home")">主頁</a>
<a href="@Url.Action("SignIn", "Sign")"> 登陸</a>
<a href="@Url.Action("SignOut", "Sign")"> 注銷</a>
<a href="@Url.Action("Detail", "Home")"> 詳細</a>
<h2>name:@HttpContext.Current.User.Identity.Name</h2>
<br />
<div>用戶名：<input id="user_name" /></div>
<div>密  碼：<input id="user_pwd" /></div>
<div><input id="btnSumbit" type="button" value="提交" /></div>
<script src="~/Scripts/jquery-1.10.2.min.js"></script>
<script>$(function () {$('#btnSumbit').click(function () {var data = {userName: $('#user_name').val(),pwd: $('#user_pwd').val()}$.post('@Url.Action("LogIn", "Sign")', data, function (result) {if (result == 1)location.href = '@ViewBag.RedirectUrl';elsealert(result);});})})
</script>

三、需要權限的控制器（調用方式）

    [Authorize]public class BaseController : Controller{}

    public class HomeController : BaseController{/// <summary>/// 首頁/// </summary>/// <returns></returns>public ActionResult Index(){return View();}public ActionResult Detail(){var cidentity = (FormsIdentity)HttpContext.User.Identity;var data = cidentity.Ticket.UserData;//獲取存儲的 數據var name = HttpContext.User.Identity.Name;var dd = FormsAuthentication.FormsCookieName;return View();}}

@{ViewBag.Title = "Index";
}<h2>Index</h2>
<a href="@Url.Action("Index", "Home")">主頁</a>
<a href="@Url.Action("SignIn", "Sign")"> 登陸</a>
<a href="@Url.Action("SignOut", "Sign")"> 注銷</a>
<a href="@Url.Action("Detail", "Home")"> 詳細</a>
<h2>name:@HttpContext.Current.User.Identity.Name</h2>

@{ViewBag.Title = "Detail";
}<h2>Detail</h2>
<a href="@Url.Action("Index", "Home")">主頁</a>
<a href="@Url.Action("SignIn", "Sign")"> 登陸</a>
<a href="@Url.Action("SignOut", "Sign")"> 注銷</a>
<a href="@Url.Action("Detail", "Home")"> 詳細</a>
<h2>name:@HttpContext.Current.User.Identity.Name</h2>

?