标签:
之前微信的网站都是使用的是identity来做用户登录的,用户都是要每次输入用户账号和密码。然后identity把用户信息保存在本地一段时间。现在是需要当用户在登录的时候绑定当前的微信账户的OpenId,通过OpenId来获取用户信息实现自动登录。
在用户进入Login这个Action之前,获取到OpenId,判断该OpenId是否绑定用户信息,如果绑定则自动登陆,并返回redirectUrl。否则把OpenId保存到Cookie,然后跳转到LoginAction,在登录验证成功之后把OpenId绑定到该用户信息上。继承实现AuthorizeAttribute,
public class WXFilterAttribute : AuthorizeAttribute { protected override bool AuthorizeCore(HttpContextBase httpContext) { string userAgent = httpContext.Request.UserAgent; if (userAgent.IndexOf("MicroMessenger") <= -1)//不是微信浏览器 { return true; } if (!httpContext.User.Identity.IsAuthenticated) { ApplicationSignInManager SignInManager = httpContext.GetOwinContext().Get<ApplicationSignInManager>(); ApplicationUserManager UserManager = httpContext.GetOwinContext().GetUserManager<ApplicationUserManager>(); string appid = string.Empty; string secret = string.Empty; appid = WxPayConfig.APPID; secret = WxPayConfig.APPSECRET; var code = httpContext.Request["Code"]; string returnUrl = HttpUtility.UrlDecode(httpContext.Request["ReturnUrl"] ?? "/"); if (string.IsNullOrEmpty(code)) { string host = httpContext.Request.Url.Host; string path = httpContext.Request.Path; string redirectUrl = "http://" + host + path + "?ReturnUrl=" + HttpUtility.UrlEncode(returnUrl);//重定向的url,这里不需要进行编码,在后面会自己编码 try { //todo:通过微信获取2.0授权的url string url = GetAuthorizeUrl(appid, redirectUrl, "state", "snsapi_base"); httpContext.Response.Redirect(url); } catch (System.Exception ex) { #if DEBUG httpContext.Response.Write("构造网页授权获取code的URL时出错,错误是:" + ex.Message); httpContext.Response.End(); #endif } } else { var client = new System.Net.WebClient(); client.Encoding = System.Text.Encoding.UTF8; string url = GetAccessTokenUrl(appid, secret, code); var data = client.DownloadString(url); var obj = JsonConvert.DeserializeObject<Dictionary<string, string>>(data); string accessToken; if (!obj.TryGetValue("access_token", out accessToken)) { #if DEBUG httpContext.Response.Write("构造网页授权获取access_token的URL时出错"); httpContext.Response.End(); #endif } var openid = obj["openid"]; Utils.WidgetCode.ServerInfo.SetCookies("WXopenid", openid, DateTime.MinValue); var existUser = UserManager.Users.FirstOrDefault(p => p.OpenId == openid); if (existUser != null) { SignInManager.SignInAsync(existUser, false, false); httpContext.Response.Redirect(returnUrl); } } } return true; } public override void OnAuthorization(AuthorizationContext filterContext) { base.OnAuthorization(filterContext); if (filterContext.HttpContext.Response.StatusCode == 401) { filterContext.Result = new RedirectResult("/403.htm");//跳转异常页面 } } //扩展 public string GetAuthorizeUrl(string appId, string redirectUrl, string state, string scope, string responseType = "code") { if (!string.IsNullOrEmpty(redirectUrl)) { redirectUrl = HttpUtility.UrlEncode(redirectUrl, System.Text.Encoding.UTF8); } else { redirectUrl = null; } object[] args = new object[] { appId, redirectUrl, responseType, scope, state }; return string.Format("https://open.weixin.qq.com/connect/oauth2/authorize?appid={0}&redirect_uri={1}&response_type={2}&scope={3}&state={4}#wechat_redirect", args); } public string GetAccessTokenUrl(string appId, string secret, string code, string grantType = "authorization_code") { object[] args = new object[] { appId, secret, code, grantType }; string requestUri = string.Format("https://api.weixin.qq.com/sns/oauth2/access_token?appid={0}&secret={1}&code={2}&grant_type={3}", args); //return GetAccessTokenInfo(_httpClient.GetAsync(requestUri).Result.Content.ReadAsStringAsync().Result); return requestUri; } }
然后在LoginAction上添加Attribute
[WXFilterAttribute] public ActionResult Login() { return View(); }
大功告成,这种方式感觉还是有点儿不好,如果有做过类似功能的朋友,还请指点一下有没有其他的实现方式,谢谢大家。
标签:
原文地址:http://www.cnblogs.com/yangkangIT/p/5913524.html