身份验证控制器（Windows 应用商店应用）
展示可实现用于身份验证的 System.Web.Mvc 控制器的代码。
用于身份验证的银行应用 Web 服务
适用于银行的 Windows 应用商店应用需要 Web 服务提供基于密码凭据和证书的身份验证。
以下代码示例展示如何实现用于提供身份验证服务的 System.Web.Mvc 控制器。
using System;
using System.Collections.Generic;
using System.Diagnostics.CodeAnalysis;
using System.Linq;
using System.Security.Principal;
using System.Web;
using System.Web.Mvc;
using System.Web.Routing;
using System.Web.Security;
using BankServer.Models;
using System.Security.Cryptography.X509Certificates;
namespace BankServer.Controllers
{
[HandleError]
public class AccountController : Controller
{
public IFormsAuthenticationService FormsService { get; set; }
public IMembershipService MembershipService { get; set; }
protected override void Initialize(RequestContext requestContext)
{
if (FormsService == null) { FormsService = new FormsAuthenticationService(); }
if (MembershipService == null) { MembershipService = new AccountMembershipService(); }
base.Initialize(requestContext);
}
// **************************************
// URL: /Account/LogOn
// **************************************
[HttpPost]
public ActionResult LogOn(LogOnModel model, string returnUrl)
{
if (ModelState.IsValid)
{
if (MembershipService.ValidateUser(model.UserName, model.Password))
{
FormsService.SignIn(model.UserName, model.RememberMe);
if (!String.IsNullOrEmpty(returnUrl))
{
return Redirect(returnUrl);
}
else
{
return RedirectToAction("Index", "Home");
}
}
else
{
ModelState.AddModelError("", "The user name or password provided is incorrect.");
}
}
// If we got this far, something failed, redisplay form
return View(model);
}
[HttpPost]
public JsonResult SimpleLogOn( string username, string password)
{
var result = new JsonResult();
result.Data = new { user = username };
return result;
}
[HttpPost]
public JsonResult GetAccountInfo()
{
var result = new JsonResult();
HttpClientCertificate clientCert = Request.ClientCertificate;
var strongAuth = false;
object[] accounts = new object[4];
accounts[0] = new
{
id = 43425453,
type = "Checking",
balance = 3000000
};
accounts[1]= new
{
id = 43425453,
type = "Savings",
balance = 2000000000
};
accounts[2] = new
{
id = 43425453,
type = "Credit Cards",
balance = 100.00
};
accounts[3] = new
{
id = 43425453,
type = "Loans",
balance = 545000
};
if (clientCert != null && clientCert.Certificate != null &&
clientCert.Certificate.Length > 0) {
// Strong authentication. Allowed to access transfer/billpay.
strongAuth = true;
};
result.Data = new
{
accounts = accounts,
strongAuth = strongAuth
};
return result;
}
// **************************************
// URL: /Account/LogOff
// **************************************
public ActionResult LogOff()
{
FormsService.SignOut();
return RedirectToAction("Index", "Home");
}
// **************************************
// URL: /Account/Register
// **************************************
public ActionResult Register()
{
ViewData["PasswordLength"] = MembershipService.MinPasswordLength;
return View();
}
[HttpPost]
public ActionResult Register(RegisterModel model)
{
if (ModelState.IsValid)
{
// Attempt to register the user
MembershipCreateStatus createStatus = MembershipService.CreateUser(model.UserName, model.Password, model.Email);
if (createStatus == MembershipCreateStatus.Success)
{
FormsService.SignIn(model.UserName, false /* createPersistentCookie */);
return RedirectToAction("Index", "Home");
}
else
{
ModelState.AddModelError("", AccountValidation.ErrorCodeToString(createStatus));
}
}
// If we got this far, something failed, redisplay form
ViewData["PasswordLength"] = MembershipService.MinPasswordLength;
return View(model);
}
// **************************************
// URL: /Account/ChangePassword
// **************************************
[Authorize]
public ActionResult ChangePassword()
{
ViewData["PasswordLength"] = MembershipService.MinPasswordLength;
return View();
}
[Authorize]
[HttpPost]
public ActionResult ChangePassword(ChangePasswordModel model)
{
if (ModelState.IsValid)
{
if (MembershipService.ChangePassword(User.Identity.Name, model.OldPassword, model.NewPassword))
{
return RedirectToAction("ChangePasswordSuccess");
}
else
{
ModelState.AddModelError("", "The current password is incorrect or the new password is invalid.");
}
}
// If we got this far, something failed, redisplay form
ViewData["PasswordLength"] = MembershipService.MinPasswordLength;
return View(model);
}
// **************************************
// URL: /Account/ChangePasswordSuccess
// **************************************
public ActionResult ChangePasswordSuccess()
{
return View();
}
}
}