MVC Filter自定义验证（拦截）

 1 namespace QS.Web.Extensions
 2 {
 3     /// <summary>
 4     ///     验证session、权限    状态
 5     /// </summary>
 6     [AttributeUsage(AttributeTargets.Class | AttributeTargets.Method, AllowMultiple = false)]
 7     public class RequestFilterAttribute : ActionFilterAttribute
 8     {
 9         public override void OnActionExecuting(ActionExecutingContext filterContext)
10         {
11             FilterAttributesInfo attributes = filterContext.GetExecutingContext();
12 
13             switch (attributes.Action.ToUpper())
14             {
15                 case "LOGIN":
16                 case "LOGINVALID":
17                 case "LOGOUT": break;
18                 default:
19                     //session验证
20                     var sessionUserInfo = filterContext.HttpContext.Session[SystemConsts.AdminSession.ToString()];
21                     if (null == sessionUserInfo)
22                     {
23                         var url = new UrlHelper(filterContext.RequestContext);
24                         var routeUrl = url.Action("Login", "Account", new { ErrorMsg = "用户信息丢失！" });
25                         filterContext.Result = new RedirectResult(routeUrl);
26                     }
27                     else
28                     {
29                         //参数非空验证
30                         foreach (var param in attributes.ParameterArray)
31                         {
32                             param.ParameterName.CheckNotNullOrEmpty(param.ParameterName);
33                         }
34                         //权限验证
35                         var permissions = filterContext
36                                             .HttpContext
37                                             .Session[SystemConsts.AdminRolePermissions.ToString()]
38                                             as List<SystemUserPermissionDto>;
39                         if (!permissions.Any(x =>
40                                 x.ControllerName.ToLower() == attributes.Controller.ToLower() &&
41                                 x.ActionName.ToLower() == attributes.Action.ToLower()))
42                         {
43                             filterContext.Result = new ContentResult() { Content = "invalid operation :no permission" };
44                         }
45                     }
46                     break;
47             }
48             base.OnActionExecuting(filterContext);
49         }
50     }
51 }

View Code

其中涉及到获取 filterContext的方法类如下：

 1 // -----------------------------------------------------------------------
 2 //  <copyright file="FilterAttributesInfo.cs" company="技术支持——谭明超">
 3 //      Copyright (c) 2016 QS.Web.Extensions. All rights reserved.
 4 //  </copyright>
 5 //  <last-editor>谭明超</last-editor>
 6 //  <last-date>2016/8/2 18:37:01</last-date>
 7 // -----------------------------------------------------------------------
 8 
 9 using System;
10 using System.Collections.Generic;
11 using System.Linq;
12 using System.Web;
13 using System.Web.Mvc;
14 
15 namespace QS.Web.Extensions
16 {
17     /// <summary>
18     ///     互殴去
19     /// </summary>
20     public class FilterAttributesInfo
21     {
22         /// <summary>
23         ///     控制器名称
24         /// </summary>
25         public string Controller { get; set; }
26         /// <summary>
27         ///     方法名称
28         /// </summary>
29         public string Action { get; set; }
30         /// <summary>
31         ///     route参数
32         /// </summary>
33         public ParameterDescriptor[] ParameterArray { get; set; }
34 
35     }
36 
37     /// <summary>
38     ///     获取 filter filterContext的相关属性
39     /// </summary>
40     public static class FilterAttributeExtension
41     {
42         /// <summary>
43         ///     获取当前filterContext的相关属性
44         /// </summary>
45         /// <param name="filterContext"></param>
46         /// <returns></returns>
47         public static FilterAttributesInfo GetExecutingContext(this ActionExecutingContext filterContext)
48         {
49             return new FilterAttributesInfo
50             {
51                 Controller = filterContext.ActionDescriptor.ControllerDescriptor.ControllerName,
52                 Action = filterContext.ActionDescriptor.ActionName,
53                 ParameterArray = filterContext.ActionDescriptor.GetParameters()
54             };
55         }
56     }
57 
58 }