读张子阳的用户验证自定义IPrincipal和IIdentity有感

<?xml version="1.0"?>
<configuration>
    <system.web>
       
    //登录的类型设置 Forms 常用的窗口验证
        <authentication mode="Forms">
            //form验证的设置 过期时间 与登录页
            <forms timeout="600" slidingExpiration="true" loginUrl="~/SignIn.aspx" />
        </authentication>
    </system.web>
    
//特别目录的权限 限制页面为页面地址 限制目录为目录限制
    <location path="AuthOnly.aspx" >
        <system.web>
            <authorization>
                //禁止匿名用户查看 ?为匿名 *为所有
                <deny users="?" />
            </authorization>
        </system.web>
    </location>
</configuration>  

public class CustomPrincipal : IPrincipal {

   //私有的当前用户
    private CustomIdentity identity;

    //为准备使用identity 赋值  设置值
    public CustomPrincipal(CustomIdentity identity) {
        this.identity = identity;
    }
    //获取值
    public IIdentity Identity {
        get {
            return identity;
        }
    }
//提供是否 在角色里的验证
    public bool IsInRole(string role) {
        return false;
    }
}

//类继承IIdentity接口
public class CustomIdentity : IIdentity {
//私有票据信息
    private FormsAuthenticationTicket ticket;
//获取当前的对象
    private HttpContext context = HttpContext.Current;

//为私有票据赋值的方法
    public CustomIdentity(FormsAuthenticationTicket ticket) {
        this.ticket = ticket;
    }

//登录类型
    public string AuthenticationType {
        get { return "Custom"; }
    }

//是否登录
    public bool IsAuthenticated {
        get { return true; }
    }
//可区分的名字，如用户名
    public string Name {
        get {
            return ticket.Name;
        }
    }

    public FormsAuthenticationTicket Ticket {
        get { return ticket; }
    }


//自定义的数据1
    // 这里可以是任意来自数据库的值，由Name属性取得
    // 需要注意此时已通过身份验证
    public string Email {
        get {
            HttpCookie cookie = context.Request.Cookies["Email"];

            if (cookie==null || String.IsNullOrEmpty(cookie.Value)) {

//
                string type = "jimmy_dev[at]163.com";   // 实际应根据name属性从数据库中获得

                cookie = new HttpCookie("UserType", type);

                cookie.Expires = DateTime.Now.AddDays(1);

                context.Response.Cookies.Add(cookie);
            }

            return cookie.Value;
        }
    }


//自定义的数据2

    public string HomePage {
        get {
            HttpCookie cookie = context.Request.Cookies["HomePage"];

            if (cookie==null || String.IsNullOrEmpty(cookie.Value)) {
                string name = "www.tracefact.net";      // 实际应根据name属性从数据库中获得
                cookie = new HttpCookie("NickName", name);
                cookie.Expires = DateTime.Now.AddDays(1);
                context.Response.Cookies.Add(cookie);
            }
            return cookie.Value;
        }
    }
}

//登录响应方法

void Application_OnPostAuthenticateRequest(object sender, EventArgs e) {

//获取当前用户票据
    IPrincipal user = HttpContext.Current.User;

// 已经登录 &&登录类型为Forms
    if (user.Identity.IsAuthenticated
        && user.Identity.AuthenticationType == "Forms") {


//获取  用户的 identity 信息
        FormsIdentity formIdentity = user.Identity as FormsIdentity;

//获取信息中的票据
        CustomIdentity identity = new CustomIdentity(formIdentity.Ticket);

//通过刚才的类写入到当前用户中
        CustomPrincipal principal = new CustomPrincipal(identity);
//为当前用户写入
        HttpContext.Current.User = principal;
//线程操作??????????
        Thread.CurrentPrincipal = principal;
    }
}

public class SiteUser
{
    public string Name;
    public string UserImage;
    public DateTime RegisterDate;
    public string Email;
    public string HomePage;
    public int PostCount;
    public int ReplyCount;
    public byte Level;

    public SiteUser(AuthDataSet.UserRow userRow) {
        this.Email = userRow.Email;
        this.HomePage = userRow.Homepage;
        this.Level = userRow.Level;
        this.Name = userRow.Name;
        this.PostCount = userRow.PostCount;
        this.RegisterDate = userRow.RegisterDate;
        this.ReplyCount = userRow.ReplyCount;
        this.UserImage = userRow.UserImage;
    }

    // 实际应该由数据库获得
    public static SiteUser GetUser(string name) {

        AuthDataSetTableAdapters.UserTableAdapter adapter
            = new AuthDataSetTableAdapters.UserTableAdapter();
        AuthDataSet.UserDataTable userTable = adapter.GetUserTable(name);
        
        if(userTable.Rows.Count >0){
            return new SiteUser((AuthDataSet.UserRow)userTable.Rows[0]);
        }

        // 因为调用这个方法时，name应该是有效的，
        // 如果name无效，直接抛出异常
        throw new ApplicationException("User Not Found");
    }
}

protected void Page_Load(object sender, EventArgs e) {

//非返回页 第一次加载
    if (!IsPostBack) {
        if (Request.IsAuthenticated) {

  
//获取用户模型对象
            SiteUser user = SiteUser.GetUser(identity.Name);

//把模型内容设置到控件里
            PopulateControls(user);

        }
    }
}