ASP.NET 内置票据认证

1、 在根目录建立一个Global.asax文件，烤入一段代码

 1     protected void Application_AuthenticateRequest(object SENDER, EventArgs e)

 2     {

 3         if (HttpContext.Current.User != null)

 4         {

 5             if (HttpContext.Current.User.Identity.IsAuthenticated)

 6             {

 7                 if (HttpContext.Current.User.Identity is FormsIdentity)

 8                 {

 9                     FormsIdentity id = (FormsIdentity)HttpContext.Current.User.Identity;

10                     FormsAuthenticationTicket tiecket = id.Ticket;

11                     string userData = tiecket.UserData;

12                     string[] roles = userData.Split(',');

13                     HttpContext.Current.User = new System.Security.Principal.GenericPrincipal(id, roles);

14                 }

15             }

16         }

17     }

2、在web.config 文件中配置目录权限及登录页

登录页，在system.web节点中

1 <</span>authentication mode="Forms">

2             <</span>forms name="mycook" loginUrl="login.aspx" protection="All" path="/"/>
 3 </</span>authentication>

配置目录权限，在system.web节点外面

 1 <</span>location path="admin">

 2         <</span>system.web>
  3 <</span>authorization>
  4 <</span>allow roles="admin"/>
  5 <</span>deny users="*"/>
  6 </</span>authorization>
  7 </</span>system.web>
  8 </</span>location>
  9 <</span>location path="user">
 10 <</span>system.web>
 11 <</span>authorization>
 12 <</span>allow roles="user"/>
 13 <</span>deny users="*"/>
 14 </</span>authorization>
 15 </</span>system.web>
 16 </</span>location>
 17 <</span>location path="admin/admin_login.aspx">
 18 <</span>system.web>
 19 <</span>authorization>
 20 <</span>allow users="*"/>
 21 </</span>authorization>
 22 </</span>system.web>
 23 </</span>location>
 24 <</span>location path="user/user_login.aspx">
 25 <</span>system.web>
 26 <</span>authorization>
 27 <</span>allow users="*"/>
 28 </</span>authorization>
 29 </</span>system.web>
 30 </</span>location>

3、在登录页的登录事件中的登录成功后烤入一段代码

// string roles = "admin"; 代表用户角色 新添加
 string roles = "admin";

 HttpCookie cook;

 string strReturnURL;

 FormsAuthenticationTicket ticket = new FormsAuthenticationTicket(

 1, user, DateTime.Now, DateTime.Now.AddMinutes(30), false, roles);

 cook = new HttpCookie("mycook");

 cook.Value = FormsAuthentication.Encrypt(ticket);

 Response.Cookies.Add(cook);

 strReturnURL = Request.Params["ReturnUrl"];

 if (strReturnURL != null && strReturnURL.Contains(".aspx"))

 {

 Response.Redirect(strReturnURL);

 }

 else

 {

 Session["已经登录"] = true;

 Response.Redirect("index.aspx");

 }

后台页面调用登录的用户名实例：

litname.Text= User.Identity.Name.ToString();

这样基本上就可以了

但是有个疑问 如果是多用户系统，用户没有登录就跳转到用户的登录页怎么办呢？

刚上面的办法是没办法跳转到2个登录页面的 这时候我们就需要建立一个中间的跳转登录页来根据ReturnURL中是否包含

admin 或者user来判断跳转到哪个登录页面了

建立 login_redirect.aspx

 1 using System;

 2  using System.Collections.Generic;

 3  using System.Linq;

 4  using System.Web;

 5  using System.Web.UI;

 6  using System.Web.UI.WebControls;

 7   

 8 namespace xh.shop.web

 9  {

10  public partial class login_redirect : System.Web.UI.Page

11  {

12  protected void Page_Load(object sender, EventArgs e)

13  {

14  string strReturnURL = Request.Params["ReturnUrl"];

15  if (strReturnURL != null && strReturnURL.Contains("admin"))

16   

17 //包含的字段
18  {

19  Response.Redirect("admin/login.aspx?ReturnUrl=" + strReturnURL);

20   

21 //如果包含admin则跳转到否则跳转到***
22  }

23  else

24  { Response.Redirect("index.aspx?ReturnUrl=" + strReturnURL);}

25   

26 }

27  }

28  }

最后config里面的loginurl改成 login_redirect.aspx就可以了

1 "Forms">

2  "mycook" loginUrl="login.aspx" protection="All" path="/"/>

3  

正文补充知识:

可以用登录控件直接显示登录状态 登录名等

<</span>asp:LoginViewID="LoginView1" runat="server"><</span>AnonymousTemplate> 没有登录显示的样式 </</span>AnonymousTemplate><</span>LoggedInTemplate> 登录后显示的样式 <</span>br /><</span>br /><</span>br/><</span>br /> 你好! <</span>asp:LoginNameID="LoginName1" runat="server"/><</span>asp:LoginStatusID="LoginStatus1" runat="server"/></</span>LoggedInTemplate></</span>asp:LoginView>

注销函数

//首先引入using System.Web.Security;protectedvoid loginout(object sender, EventArgs e) {

FormsAuthentication.SignOut(); //注销当前登录用户}