c# - 访问表单例份验证票

标签 c# asp.net authentication

我使用表单例份验证 cookie 存储用户详细信息。

FormsAuthenticationTicket authTicket = new  FormsAuthenticationTicket(1, userName,DateTime.Now,DateTime.Now.AddMinutes(Timeout)false};

string encryptedTicket = FormsAuthentication.Encrypt(authTicket);

HttpCookie authCookie = new HttpCookie(
FormsAuthentication.FormsCookieName,encryptedTicket);    

HttpContext.Current.Response.Cookies.Add(authCookie);

如何取回添加的 cookie 和用户详细信息 (authTicket)?

最佳答案

您可以检索 FormsAuthenticationTicket使用类似于以下的代码:

// Retrieves the cookie that contains your custom FormsAuthenticationTicket.
HttpCookie authCookie = HttpContext.Current.Request.Cookies[FormsAuthentication.FormsCookieName];

// Decrypts the FormsAuthenticationTicket that is held in the cookie's .Value property.
FormsAuthenticationTicket authTicket = FormsAuthentication.Decrypt(authCookie.Value);

// The "authTicket" variable now contains your original, custom FormsAuthenticationTicket,
// complete with User-specific custom data.  You can then check that the FormsAuthenticationTicket's
// .Name property is for the correct user, and perform the relevant functions with the ticket.
// Here, we simply write the user-specific data to the Http Response stream.
if (authTicket.Name == txtUserName.Text)
{
    Response.Write(authTicket.UserData);
}

上面的代码引用了诸如 txtUserName.Text 之类的东西,所以这是一个完整的 .ASPX 页面,您可以将其粘贴到一个空的 ASP.NET 网络表单中以查看它是如何工作的:

<%@ Page Language="C#" %>
<%@ Import Namespace="System.Web.Security" %>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<script runat="server">


    protected void Page_Load(object sender, EventArgs e)
    {
        double Timeout = 15.00;

        if (!IsPostBack)
        {
            FormsAuthenticationTicket authTicket = new FormsAuthenticationTicket(1,txtUserName.Text,
                    DateTime.Now,DateTime.Now.AddMinutes(Timeout), false, "This is my secret user-specific data");

            string encryptedTicket = FormsAuthentication.Encrypt(authTicket);
            HttpCookie authCookie = new HttpCookie(FormsAuthentication.FormsCookieName,encryptedTicket);
            HttpContext.Current.Response.Cookies.Add(authCookie);
        }
        else
        {
            // Retrieves the cookie that contains your custom FormsAuthenticationTicket.
            HttpCookie authCookie = HttpContext.Current.Request.Cookies[FormsAuthentication.FormsCookieName];

            // Decrypts the FormsAuthenticationTicket that is held in the cookie's .Value property.
            FormsAuthenticationTicket authTicket = FormsAuthentication.Decrypt(authCookie.Value);

            // The "authTicket" variable now contains your original, custom FormsAuthenticationTicket,
            // complete with User-specific custom data.  You can then check that the FormsAuthenticationTicket's
            // .Name property is for the correct user, and perform the relevant functions with the ticket.
            // Here, we simply write the user-specific data to the Http Response stream.
            if (authTicket.Name == txtUserName.Text)
            {
                Response.Write(authTicket.UserData);
            }
        }
    }        
</script>


<html xmlns="http://www.w3.org/1999/xhtml" >
<head>
    <title>Forms Authentication Login</title>
</head>
<body>
    <form id="form1" runat="server">
        <div>
            <table>
                <tr>
                    <td>
                        UserName:
                    </td>
                    <td>
                        <asp:TextBox ID="txtUserName" runat="server"></asp:TextBox>   
                    </td>
                </tr>
                 <tr>
                    <td>
                        Password:
                    </td>
                    <td>
                        <asp:TextBox ID="txtPassword" runat="server"></asp:TextBox>   
                    </td>
                </tr>
                <tr>
                    <td>
                        <asp:Button ID="Button1" runat="server" Text="Login" />
                    </td>
                </tr>
            </table>
        </div>
    </form>
</body>
</html>

关于c# - 访问表单例份验证票,我们在Stack Overflow上找到一个类似的问题: https://stackoverflow.com/questions/3351985/

相关文章:

ASP.NET MVC 多线程

c# - 渲染出一张 table

php - 在 PHP/MySQL 注销表单中围绕 session 变量包装函数

azure - Passport-azure-ad 单点登录 (SSO)

java - 如何在 Guice 中使用@SessionScoped

c# - ASP.NET 登录控件 - 我可以将 FailureText 添加为 ValidationSummary 中的一个项目吗?

c# - 为什么我的命令不能启用按钮?

.net - 在 IIS 7 中注册自定义模块

c# - 使用可移植类库作为 COM 接口(interface)

C#如何分离控件和控件的自定义设计器