253 lines
12 KiB
C#
253 lines
12 KiB
C#
|
using System;
|
|||
|
|
using System.Collections.Generic;
|
|||
|
|
using System.Linq;
|
|||
|
|
using System.Web;
|
|||
|
|
using System.Web.Mvc;
|
|||
|
|
using System.Data;
|
|||
|
|
using Newtonsoft.Json;
|
|||
|
|
using Newtonsoft.Json.Linq;
|
|||
|
|
using System.Dynamic;
|
|||
|
|
using Common;
|
|||
|
|
using Service;
|
|||
|
|
|
|||
|
|
namespace WebSite.Controllers
|
|||
|
|
{
|
|||
|
|
public class Oauth2Controller : BaseController
|
|||
|
|
{
|
|||
|
|
private static log4net.ILog logger = log4net.LogManager.GetLogger(typeof(Oauth2Controller));
|
|||
|
|
private static string _clientID = System.Configuration.ConfigurationManager.AppSettings["rokid_client_id"];
|
|||
|
|
private static string _clientSecret = System.Configuration.ConfigurationManager.AppSettings["rokid_client_secret"];
|
|||
|
|
private static int _expiresIn = 180000;//50个小时
|
|||
|
|
|
|||
|
|
public ISysUserManager SysUserManager { get; set; }
|
|||
|
|
public ISysOauth2Manager SysOauth2Manager { get; set; }
|
|||
|
|
|
|||
|
|
public ActionResult Index()
|
|||
|
|
{
|
|||
|
|
return View();
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
public ActionResult Authorize()
|
|||
|
|
{
|
|||
|
|
logger.Error("收到调用Authorize方法Url：" + Request.Url);
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
if (Request.QueryString["response_type"] != "code")//固定code
|
|||
|
|
{
|
|||
|
|
return returnResult("response_type验证失败");
|
|||
|
|
}
|
|||
|
|
string client_id = Request.QueryString["client_id"];//若琪所使用的标识
|
|||
|
|
string redirect_uri = Request.QueryString["redirect_uri"];//回调地址
|
|||
|
|
string state = Request.QueryString["state"];//用来保持授权请求和授权回调状态的值，当授权完成后需要将这个参数附加在回调里。
|
|||
|
|
//string scope = Request.QueryString["scope"];//授权的范围
|
|||
|
|
if (client_id != _clientID)
|
|||
|
|
{
|
|||
|
|
logger.Error("client_id验证失败:" + client_id);
|
|||
|
|
return returnResult("client_id验证失败");
|
|||
|
|
}
|
|||
|
|
if (string.IsNullOrEmpty(redirect_uri))
|
|||
|
|
{
|
|||
|
|
logger.Error("redirect_uri无效:" + redirect_uri);
|
|||
|
|
return returnResult("redirect_uri无效");
|
|||
|
|
}
|
|||
|
|
if (redirect_uri.IndexOf("lzos.lunzn.com") > -1)//岚正播放盒免登录授权
|
|||
|
|
{
|
|||
|
|
string code = "1001BLW" + redirect_uri.Substring(redirect_uri.LastIndexOf("/") + 1);
|
|||
|
|
var sysOahth2 = SysOauth2Manager.Get(code);
|
|||
|
|
if (null == sysOahth2)
|
|||
|
|
{
|
|||
|
|
SysOauth2Manager.Save(new Domain.SysOauth2() { Code = code, RedirectUri = redirect_uri, ExpiresIn = _expiresIn, CreatedDate = DateTime.Now, Account = "system" });
|
|||
|
|
}
|
|||
|
|
return Redirect(redirect_uri + "?code=" + code + "&state=" + state);
|
|||
|
|
}
|
|||
|
|
else
|
|||
|
|
{
|
|||
|
|
ViewData["client_id"] = client_id;
|
|||
|
|
ViewData["redirect_uri"] = redirect_uri;
|
|||
|
|
ViewData["state"] = state;
|
|||
|
|
return View();
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
catch (Exception ex)
|
|||
|
|
{
|
|||
|
|
logger.Error(ex);
|
|||
|
|
return returnResult("授权失败：" + ex.Message);
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
public ActionResult LoginOn(string jsonData)
|
|||
|
|
{
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
JObject jData = (JObject)JsonConvert.DeserializeObject(jsonData);
|
|||
|
|
string account = jData["account"].ToString();
|
|||
|
|
string password = jData["password"].ToString();
|
|||
|
|
string redirect_uri = jData["redirect_uri"].ToString();
|
|||
|
|
var entity = SysUserManager.Get(account, password);
|
|||
|
|
if (entity == null)
|
|||
|
|
{
|
|||
|
|
return Json(new { IsSuccess = false, Message = HttpContext.InnerLanguage("UsernameOrPasswordWrong") });
|
|||
|
|
}
|
|||
|
|
if (!entity.ActiveIndicator)
|
|||
|
|
{
|
|||
|
|
return Json(new { IsSuccess = false, Message = HttpContext.InnerLanguage("YourAccountHasBeenDisabledPleaseContactTheAdministrator") });
|
|||
|
|
}
|
|||
|
|
string code = entity.Hotels[0].Code + "BLW" + redirect_uri.Substring(redirect_uri.LastIndexOf("/") + 1);
|
|||
|
|
var sysOauth2 = SysOauth2Manager.Get(code);
|
|||
|
|
if (null == sysOauth2)
|
|||
|
|
{
|
|||
|
|
SysOauth2Manager.Save(new Domain.SysOauth2() { Code = code, RedirectUri = redirect_uri, ExpiresIn = _expiresIn, CreatedDate = DateTime.Now, Account = account });
|
|||
|
|
}
|
|||
|
|
redirect_uri = System.Web.HttpUtility.UrlDecode(redirect_uri, System.Text.Encoding.UTF8) + "?code=" + code + "&state=" + jData["state"].ToString();
|
|||
|
|
return Json(new { IsSuccess = true, Message = redirect_uri });
|
|||
|
|
}
|
|||
|
|
catch (Exception ex)
|
|||
|
|
{
|
|||
|
|
logger.Error(ex);
|
|||
|
|
return returnResult("授权失败：" + ex.Message);
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
public ActionResult Token()
|
|||
|
|
{
|
|||
|
|
Request.InputStream.Position = 0;
|
|||
|
|
byte[] reqBody = new byte[Request.InputStream.Length];
|
|||
|
|
Request.InputStream.Read(reqBody, 0, reqBody.Length);
|
|||
|
|
string reqData = System.Text.Encoding.UTF8.GetString(reqBody);
|
|||
|
|
//logger.Error("收到调用Token方法参数值：" + reqData);
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
string grant_type = "";//Request.QueryString["grant_type"];//必须，值为 authorization_code，如果是刷新 Token 则为 refresh_token
|
|||
|
|
string code = "";//Request.QueryString["code"];//如果是通过 authorization_code 获取 access token 则为必须，授权过程中颁发的授权代码
|
|||
|
|
string client_id = "";//Request.QueryString["client_id"];//必须，若琪所使用的标识
|
|||
|
|
string client_secret = "";//Request.QueryString["client_secret"];//可选，如果使用 HTTP Basic Auth 则该参数会包含在 HTTP Authorization Header 中
|
|||
|
|
string refresh_token = "";
|
|||
|
|
string[] queryStrings = reqData.Split('&');
|
|||
|
|
foreach (string queryString in queryStrings)
|
|||
|
|
{
|
|||
|
|
string[] querys = queryString.Split('=');
|
|||
|
|
switch (querys[0])
|
|||
|
|
{
|
|||
|
|
case "client_id":
|
|||
|
|
client_id = querys[1];
|
|||
|
|
break;
|
|||
|
|
case "client_secret":
|
|||
|
|
client_secret = querys[1];
|
|||
|
|
break;
|
|||
|
|
case "grant_type":
|
|||
|
|
grant_type = querys[1];
|
|||
|
|
break;
|
|||
|
|
case "code":
|
|||
|
|
code = querys[1];
|
|||
|
|
break;
|
|||
|
|
case "refresh_token":
|
|||
|
|
refresh_token = querys[1];
|
|||
|
|
break;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
if (string.IsNullOrEmpty(client_id))//获取岚正播放盒调用参数
|
|||
|
|
{
|
|||
|
|
JObject jData = (JObject)JsonConvert.DeserializeObject(reqData);
|
|||
|
|
client_id = jData["client_id"].ToString();
|
|||
|
|
client_secret = jData["client_secret"].ToString();
|
|||
|
|
grant_type = jData["grant_type"].ToString();
|
|||
|
|
code = jData["code"].ToString();
|
|||
|
|
refresh_token = jData["refresh_token"] == null ? "" : jData["refresh_token"].ToString();
|
|||
|
|
}
|
|||
|
|
if (client_id != _clientID)
|
|||
|
|
{
|
|||
|
|
logger.Error("client_id验证失败:" + client_id);
|
|||
|
|
return returnResult("client_id验证失败");
|
|||
|
|
}
|
|||
|
|
if (client_secret != _clientSecret)
|
|||
|
|
{
|
|||
|
|
logger.Error("client_secret验证失败:" + client_secret);
|
|||
|
|
return returnResult("client_secret验证失败");
|
|||
|
|
}
|
|||
|
|
Domain.SysOauth2 sysOauth2 = null;
|
|||
|
|
switch (grant_type)
|
|||
|
|
{
|
|||
|
|
case "client_credentials"://客户端凭证授权模式
|
|||
|
|
code = "1001BLWXiaoDu";//1001BLWXiaoMi
|
|||
|
|
sysOauth2 = SysOauth2Manager.Get(code);
|
|||
|
|
if (null == sysOauth2)
|
|||
|
|
{
|
|||
|
|
sysOauth2 = new Domain.SysOauth2()
|
|||
|
|
{
|
|||
|
|
Code = code,
|
|||
|
|
RedirectUri = "",
|
|||
|
|
ExpiresIn = _expiresIn,
|
|||
|
|
CreatedDate = DateTime.Now,
|
|||
|
|
Account = "system",
|
|||
|
|
AccessToken = code.Substring(0, code.IndexOf("BLW") + 3) + Guid.NewGuid(),
|
|||
|
|
RefreshToken = code.Substring(0, code.IndexOf("BLW") + 3) + Guid.NewGuid()
|
|||
|
|
};
|
|||
|
|
SysOauth2Manager.Save(sysOauth2);
|
|||
|
|
}
|
|||
|
|
else
|
|||
|
|
{
|
|||
|
|
sysOauth2.ExpiresIn = _expiresIn;
|
|||
|
|
sysOauth2.CreatedDate = DateTime.Now;
|
|||
|
|
SysOauth2Manager.Update(sysOauth2);//更新保存token
|
|||
|
|
}
|
|||
|
|
return Json(sysOauth2.AccessToken, JsonRequestBehavior.AllowGet);
|
|||
|
|
case "refresh_token":
|
|||
|
|
sysOauth2 = SysOauth2Manager.GetByRefreshToken(refresh_token);
|
|||
|
|
break;
|
|||
|
|
default:
|
|||
|
|
sysOauth2 = SysOauth2Manager.Get(code);
|
|||
|
|
sysOauth2.AccessToken = sysOauth2.Code.Substring(0, sysOauth2.Code.IndexOf("BLW") + 3) + Guid.NewGuid();//获取新的token
|
|||
|
|
sysOauth2.RefreshToken = sysOauth2.Code.Substring(0, sysOauth2.Code.IndexOf("BLW") + 3) + Guid.NewGuid();//获取新的token
|
|||
|
|
break;
|
|||
|
|
}
|
|||
|
|
if (null == sysOauth2)
|
|||
|
|
{
|
|||
|
|
logger.Error(string.Format("code或refresh_token验证失败,code:{0},refresh_token:{1}, 收到调用参数:{2}, 来自:{3}", code, refresh_token, reqData, Tools.GetClientIP()));
|
|||
|
|
return returnResult("code或refresh_token验证失败");
|
|||
|
|
}
|
|||
|
|
sysOauth2.ExpiresIn = _expiresIn;
|
|||
|
|
sysOauth2.CreatedDate = DateTime.Now;
|
|||
|
|
SysOauth2Manager.Update(sysOauth2);//更新保存token
|
|||
|
|
AuthorizeResult result = new AuthorizeResult
|
|||
|
|
{
|
|||
|
|
access_token = sysOauth2.AccessToken,
|
|||
|
|
expires_in = sysOauth2.ExpiresIn,
|
|||
|
|
refresh_token = sysOauth2.RefreshToken,
|
|||
|
|
example_parameter = "example_value"
|
|||
|
|
};
|
|||
|
|
return Json(result, JsonRequestBehavior.AllowGet);
|
|||
|
|
}
|
|||
|
|
catch (Exception ex)
|
|||
|
|
{
|
|||
|
|
logger.Error(ex);
|
|||
|
|
return returnResult("授权失败：" + ex.Message);
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private ActionResult returnResult(string message)
|
|||
|
|
{
|
|||
|
|
return Json(new { IsSuccess = false, Message = message }, JsonRequestBehavior.AllowGet);
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
public class AuthorizeResult
|
|||
|
|
{
|
|||
|
|
/// <summary>
|
|||
|
|
/// 必须，由授权服务颁发的 access token
|
|||
|
|
/// </summary>
|
|||
|
|
public string access_token { get; set; }
|
|||
|
|
/// <summary>
|
|||
|
|
/// 可选，AccessToken 的寿命，以秒为单位，如果 access_token 会过期则应该必须提供
|
|||
|
|
/// </summary>
|
|||
|
|
public int expires_in { get; set; }
|
|||
|
|
/// <summary>
|
|||
|
|
/// 可选，用来通过以 refresh_token 的 grant_type 请求 AccessToken 接口获取新的 AccessToken 的 token
|
|||
|
|
/// </summary>
|
|||
|
|
public string refresh_token { get; set; }
|
|||
|
|
/// <summary>
|
|||
|
|
/// example_value
|
|||
|
|
/// </summary>
|
|||
|
|
public string example_parameter { get; set; }
|
|||
|
|
}
|
|||
|
|
}
|