206 lines
8.7 KiB
C#
206 lines
8.7 KiB
C#
|
using Microsoft.AspNetCore.Http.Extensions;
|
|||
|
|
using Microsoft.AspNetCore.Mvc;
|
|||
|
|
using Microsoft.AspNetCore.Mvc.Filters;
|
|||
|
|
using Microsoft.IdentityModel.Tokens;
|
|||
|
|
using Models;
|
|||
|
|
using System.IdentityModel.Tokens.Jwt;
|
|||
|
|
using System.Text;
|
|||
|
|
using Newtonsoft.Json;
|
|||
|
|
using System.Security.Claims;
|
|||
|
|
using System.Linq;
|
|||
|
|
using System.Collections.Generic;
|
|||
|
|
using System;
|
|||
|
|
using SERVER;
|
|||
|
|
using Microsoft.AspNetCore.Http;
|
|||
|
|
using Quartz;
|
|||
|
|
using System.Threading.Tasks;
|
|||
|
|
using WebUI.LIB;
|
|||
|
|
using COMMON;
|
|||
|
|
using SERVER.LIB;
|
|||
|
|
|
|||
|
|
namespace WebUI.Controllers
|
|||
|
|
{
|
|||
|
|
/// <summary>
|
|||
|
|
/// 基础控制器 判定权限
|
|||
|
|
/// </summary>
|
|||
|
|
public class BaseController : Controller
|
|||
|
|
{
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
/// 用户 权限酒店原始数据 有分组
|
|||
|
|
/// </summary>
|
|||
|
|
public IList<HotelDataItem> Hotels = new List<HotelDataItem>();
|
|||
|
|
/// <summary>
|
|||
|
|
/// 用户 当前选择的酒店 这里的id 等于库里面 的 oLDid
|
|||
|
|
/// </summary>
|
|||
|
|
public HotelsItem SelHotel = new HotelsItem { };
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
/// 用户 权限酒店
|
|||
|
|
/// </summary>
|
|||
|
|
public List<HotelsItem> Hoteldata = new List<HotelsItem>();
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
///
|
|||
|
|
/// </summary>
|
|||
|
|
public Datainfo data { get; set; } = null;
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
/// TOken 是用户名
|
|||
|
|
/// </summary>
|
|||
|
|
public string TOken { get; set; } = string.Empty;
|
|||
|
|
public string TOken_rom { get; set; } = string.Empty;
|
|||
|
|
public string Cookie { get; set; } = string.Empty;
|
|||
|
|
//复写父类的该方法。执行控制器中的方法之前先执行该方法。从而实现过滤的功能。
|
|||
|
|
public override void OnActionExecuting(ActionExecutingContext filterContext)
|
|||
|
|
{
|
|||
|
|
base.OnActionExecuting(filterContext); //调用父类的该方法。
|
|||
|
|
Cookie = Request.Cookies["CurrentUser"];
|
|||
|
|
if (Cookie != null)
|
|||
|
|
{
|
|||
|
|
var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(JwtConst.Instance.SecurityKey));
|
|||
|
|
//校验token
|
|||
|
|
var validateParameter = new TokenValidationParameters()
|
|||
|
|
{
|
|||
|
|
ValidateLifetime = true,
|
|||
|
|
ValidateAudience = true,
|
|||
|
|
ValidateIssuer = true,
|
|||
|
|
ValidateIssuerSigningKey = true,
|
|||
|
|
ValidIssuer = JwtConst.Instance.Domain,
|
|||
|
|
ValidAudience = JwtConst.Instance.Domain,
|
|||
|
|
IssuerSigningKey = key
|
|||
|
|
};
|
|||
|
|
//不校验，直接解析token
|
|||
|
|
//jwtToken = new JwtSecurityTokenHandler().ReadJwtToken(token1);
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
//校验并解析token
|
|||
|
|
var claimsPrincipal = new JwtSecurityTokenHandler().ValidateToken(Request.Cookies["CurrentUser"], validateParameter, out SecurityToken validatedToken);//validatedToken:解密后的对象
|
|||
|
|
//var jwtPayload = ((JwtSecurityToken)validatedToken).Payload.SerializeToJson(); //获取payload中的数据
|
|||
|
|
TOken = claimsPrincipal.Identities.First().Name;
|
|||
|
|
int[] rom = XC_Redis.Redis.GetKey<int[]>(TOken + Cookie.Substring(Cookie.Length - 8) + "_rom");
|
|||
|
|
TOken_rom = TOken;
|
|||
|
|
if (rom == null)
|
|||
|
|
{
|
|||
|
|
rom = XC_Redis.Redis.GetKey<int[]>(TOken + Cookie.Substring(Cookie.Length - 8) + "_rom_old");
|
|||
|
|
};
|
|||
|
|
if (rom == null)
|
|||
|
|
{
|
|||
|
|
throw new Exception();
|
|||
|
|
};
|
|||
|
|
foreach (var item in rom)
|
|||
|
|
{
|
|||
|
|
TOken_rom += Cookie[item];
|
|||
|
|
}
|
|||
|
|
data = XC_Redis.Redis.GetKey<Datainfo>(TOken);
|
|||
|
|
if (data == null)
|
|||
|
|
{
|
|||
|
|
throw new Exception();
|
|||
|
|
}
|
|||
|
|
SelHotel = XC_Redis.Redis.GET(TOken_rom + "_sel", () =>
|
|||
|
|
{
|
|||
|
|
if (data.HotelData == null || data.HotelData.Count <= 0)
|
|||
|
|
{
|
|||
|
|
return null;
|
|||
|
|
}
|
|||
|
|
// 账号其他地方 登录 更新权限信息
|
|||
|
|
// 同一账号 权限信息 共享 不会因为先登录而多用有某些权限
|
|||
|
|
XC_Redis.Redis.Remove(TOken + "_Hoteldata");
|
|||
|
|
return data.HotelData.FirstOrDefault().Hotels.FirstOrDefault();
|
|||
|
|
});
|
|||
|
|
Hotels = data.HotelData;
|
|||
|
|
|
|||
|
|
Hoteldata = XC_Redis.Redis.GET(TOken + "_Hoteldata", () =>
|
|||
|
|
{
|
|||
|
|
foreach (var item in Hotels)
|
|||
|
|
{
|
|||
|
|
Hoteldata.AddRange(item.Hotels);
|
|||
|
|
}
|
|||
|
|
return Hoteldata;
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
ViewBag.SelHotel = SelHotel;
|
|||
|
|
|
|||
|
|
ViewBag.Uname = TOken;
|
|||
|
|
|
|||
|
|
ViewBag.HeadImg = data.Userinfo.HeadImg;
|
|||
|
|
|
|||
|
|
string keys = data.Userinfo.Uid;
|
|||
|
|
|
|||
|
|
|
|||
|
|
}
|
|||
|
|
catch (SecurityTokenExpiredException ex)
|
|||
|
|
{
|
|||
|
|
LogHelp.Error(ex.ToString());
|
|||
|
|
//表示过期
|
|||
|
|
filterContext.Result = Redirect("/Login/index?REURL=" + HttpContext.Request.GetDisplayUrl());
|
|||
|
|
}
|
|||
|
|
catch (SecurityTokenException ex)
|
|||
|
|
{
|
|||
|
|
LogHelp.Error(ex.ToString());
|
|||
|
|
//表示token错误
|
|||
|
|
filterContext.Result = Redirect("/Login/index?REURL=" + HttpContext.Request.GetDisplayUrl());
|
|||
|
|
}
|
|||
|
|
catch (Exception ex)
|
|||
|
|
{
|
|||
|
|
LogHelp.Error(ex.ToString());
|
|||
|
|
filterContext.Result = Redirect("/Login/index?REURL=" + HttpContext.Request.GetDisplayUrl());
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
else
|
|||
|
|
{
|
|||
|
|
//这种跳转方式直接返回一个ActionResult，不会继续向下执行，而是直接跳转。速度快。
|
|||
|
|
filterContext.Result = Redirect("/Login/index?REURL=" + HttpContext.Request.GetDisplayUrl());
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
public static void SXTOKEN(BaseController baseController, HttpContext httpContext)
|
|||
|
|
{
|
|||
|
|
|
|||
|
|
var keys = baseController.TOken;
|
|||
|
|
|
|||
|
|
var claims = new[]
|
|||
|
|
{
|
|||
|
|
new Claim(JwtRegisteredClaimNames.Nbf,$"{new DateTimeOffset(DateTime.Now).ToUnixTimeSeconds()}") ,
|
|||
|
|
new Claim (JwtRegisteredClaimNames.Exp,$"{new DateTimeOffset(DateTime.Now.AddMinutes(20)).ToUnixTimeSeconds()}"),
|
|||
|
|
new Claim(ClaimTypes.Name,keys)
|
|||
|
|
};
|
|||
|
|
var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(JwtConst.Instance.SecurityKey));
|
|||
|
|
var creds = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);
|
|||
|
|
var token = new JwtSecurityToken(
|
|||
|
|
issuer: JwtConst.Instance.Domain,
|
|||
|
|
audience: JwtConst.Instance.Domain,
|
|||
|
|
claims: claims,
|
|||
|
|
expires: DateTime.Now.AddMinutes(20),
|
|||
|
|
signingCredentials: creds);
|
|||
|
|
var RES = new ReturnData<string> { IsSuccess = true };
|
|||
|
|
string toke = new JwtSecurityTokenHandler().WriteToken(token);
|
|||
|
|
|
|||
|
|
httpContext.Response.Cookies.Append("CurrentUser", toke);
|
|||
|
|
|
|||
|
|
int[] rom = {
|
|||
|
|
new Random(int.Parse(UtilsSharp.RandomHelper.Number(4))).Next(0, toke.Length),
|
|||
|
|
new Random(int.Parse(UtilsSharp.RandomHelper.Number(4))).Next(0, toke.Length),
|
|||
|
|
new Random(int.Parse(UtilsSharp.RandomHelper.Number(4))).Next(0, toke.Length),
|
|||
|
|
new Random(int.Parse(UtilsSharp.RandomHelper.Number(4))).Next(0, toke.Length),
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
XC_Redis.Redis.SetKey(keys + baseController.Cookie.Substring(baseController.Cookie.Length - 8) + "_rom_old",
|
|||
|
|
|
|||
|
|
XC_Redis.Redis.GetKey<int[]>(keys + baseController.Cookie.Substring(baseController.Cookie.Length - 8) + "_rom"), 10);
|
|||
|
|
|
|||
|
|
XC_Redis.Redis.Remove(keys + baseController.Cookie.Substring(baseController.Cookie.Length - 8) + "_rom");
|
|||
|
|
|
|||
|
|
XC_Redis.Redis.SetKey(keys + toke.Substring(toke.Length - 8) + "_rom", rom, 20);
|
|||
|
|
|
|||
|
|
foreach (var item in rom)
|
|||
|
|
{
|
|||
|
|
keys += toke[item];
|
|||
|
|
}
|
|||
|
|
XC_Redis.Redis.SetKey(baseController.TOken, baseController.data, 20);
|
|||
|
|
XC_Redis.Redis.SetKey(keys + "_sel", baseController.SelHotel,20);
|
|||
|
|
XC_Redis.Redis.SetKey(baseController.TOken_rom + "_sel", baseController.SelHotel,10);
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|