.net MVC中使用forms驗證

文件夾的分部是這樣子的

首先在Web.config中設置

authentication和authorization 節點

  <system.web>
    <authentication mode="Forms">
      <forms loginUrl="~/Login/Index" timeout="2880" defaultUrl="~/Home/Index"/>
    </authentication>
    <anonymousIdentification enabled="true"/>
    <authorization>
      <deny users="?"/> <!--拒絕匿名訪問-->
    </authorization>
    <compilation debug="true" targetFramework="4.5" />
    <httpRuntime targetFramework="4.5" />
    <httpModules>
      <add name="ApplicationInsightsWebTracking" type="Microsoft.ApplicationInsights.Web.ApplicationInsightsHttpModule, Microsoft.AI.Web" />
    </httpModules>
  </system.web>

如果在Login文件夾還有不需要匿名訪問，或者在LoginController中除了登陸還有方法可以匿名訪問，

那麼我們需要在加上這一個節點

  <location path="Login"> <!--這裡的意思就是LoginController下的方法可以匿名訪問-->
    <system.web>
      <authorization>
        <allow users="*" /> <!--允許匿名訪問-->
      </authorization>
    </system.web>
  </location>

登陸的方法貼出一部分代碼，僅供參考

 public bool ValidateUser(LoginVO model)
        {
            string encodePassword = MD5(model.PassWord);//加密
            string sql =
                "select * from User_Users where (UserName=@UserName or JobNumber=@JobNumber) and PassWord=@PassWord";
            var user = Context.Data.Query<UsersPO>(sql,
                new {UserName = model.LoginName, JobNumber = model.LoginName, PassWord = encodePassword}).SingleOrDefault();
            if (user == null) return false;
            DateTime expiration = model.IsRememberLogin  //是否記住密碼
                ? DateTime.Now.AddDays(14)
                : DateTime.Now.Add(FormsAuthentication.Timeout);
            var ticket=new FormsAuthenticationTicket(
                1,//指定版本號：可隨意指定
                user.UserName,//登錄用戶名：對應 Web.config 中 <allow users="Admin" … /> 的 users 屬性
                DateTime.Now, //發佈時間
                expiration,//失效時間
                true,//是否為持久 Cookie
                user.UserId.ToString(), //用戶數據：可用 ((System.Web.Security.FormsIdentity)(HttpContext.Current.User.Identity)).Ticket.UserData 獲取
                FormsAuthentication.FormsCookiePath //指定 Cookie 為 Web.config 中 <forms path="/" … /> path 屬性，不指定則預設為“/”
                );
            var encryptedTicket = FormsAuthentication.Encrypt(ticket);
            if (HttpContext.Current.Request.Cookies[FormsAuthentication.FormsCookieName] != null)
            {
                HttpContext.Current.Request.Cookies.Remove(FormsAuthentication.FormsCookieName);
            }
            var loginIdentify=new HttpCookie(FormsAuthentication.FormsCookieName);
            if (model.IsRememberLogin)
            {
                loginIdentify.Expires = DateTime.Now.AddDays(7);
            }
            loginIdentify.Value = encryptedTicket;
            HttpContext.Current.Response.AppendCookie(loginIdentify);//添加Cookie
            return true;
        }

        /// <summary>
        /// 加密
        /// </summary>
        /// <param name="str"></param>
        /// <param name="encoding"></param>
        /// <param name="toUpper"></param>
        /// <param name="isReverse"></param>
        /// <param name="count"></param>
        /// <returns></returns>
        private string MD5(string str, Encoding encoding=null,  int count = 1)
        {
            if (encoding == null)
            {
                encoding = Encoding.Default;
            }
            var bytes = new MD5CryptoServiceProvider().ComputeHash(encoding.GetBytes(str));
            var md5 = string.Empty;
            for (int i = 0; i < bytes.Length; i++)
            {
                md5 += bytes[i].ToString("x").PadLeft(2, '0');
            }         
            if (count <= 1) { return md5; }
            return MD5(md5, encoding, --count);
        }