Asp.Net.Identity认证不依赖Entity Framework实现方式

Asp.Net.Identity为何物请自行搜索，也可转向此文章http://www.cnblogs.com/shanyou/p/3918178.html

本来微软已经帮我们将授权、认证以及数据库存储都一一处理好了。但是总有这种情况，如我们现在的项目是已经存在了数据库，且库里已经有用户、角色等信息表，但是

我们还是贪心想使用微软的授权、认证类库。这里我就来实际实践下到底可行不可行~

第一步、新建一个Asp.Net MVC框架的web工程

第二部、Nuget上安装Microsoft.AspNet.Identity、Microsoft.AspNet.Identity.Owin

其中Microsoft.AspNet.Identity.Owin有依赖项,它依赖了这几个包:

Microsoft.Owin.Security.OAuth MSDN注解:包含与 OAuth 提供程序相关的类型。(详细信息参考 https://msdn.microsoft.com/zh-cn/library/microsoft.owin.security.oauth(v=vs.111).aspx)

Microsoft.Owin.Security.Cookies MSDN注解:提供与身份 cookie 相关的类型。 (详细信息参考 https://msdn.microsoft.com/zh-cn/library/microsoft.owin.security.cookies(v=vs.111).aspx)

Microsoft.Owin.Security MSDN注解:包含与身份验证相关的类型。 (详细信息参考 https://msdn.microsoft.com/zh-cn/library/microsoft.owin.security(v=vs.111).aspx)

Microsoft.AspNet.Identity.Core MSDN注解:包含与管理 ASP.NET Identity 的用户和角色相关的类和接口。

(信息信息参考:https://msdn.microsoft.com/library/microsoft.aspnet.identity(v=vs.111).aspx)

从MSDN的注解可以看出来Microsoft.AspNet.Identity.Owin里其实就是将网站的登录、注册业务场景所需的API进行了封装；

第三部、建模

如我现在的数据库的用户表为BASE_USER，表结构如下

CREATE TABLE [dbo].[BASE_USER](
	[ID] [uniqueidentifier] NOT NULL PRIMARY KEY,
	[NAME] [varchar](50) NOT NULL,
	[PWD] [varchar](50) NOT NULL,
) ON [PRIMARY]

我们在工程站点的Models文件夹里新建一个BASE_USER类，让它继承Microsoft.AspNet.Identity.IUser<GUID>,这里我们加一个数据表不存在的NICKNAME昵称字段，到后面看看会有什么效果~

 1 using System;
 2 using System.Collections.Generic;
 3 using System.Linq;
 4 using System.Web;
 5 
 6 namespace IdeintityDemo.Models
 7 {
 8     public class BASE_USER : Microsoft.AspNet.Identity.IUser<Guid>
 9     {
10         /// <summary>
11         /// 用户编号
12         /// </summary>
13         public Guid Id { get; set; }
14         /// <summary>
15         /// 用户名
16         /// </summary>
17         public string UserName { get; set; }
18         /// <summary>
19         /// 密码
20         /// </summary>
21         public string PWD { get; set; }
22         /// <summary>
23         /// 昵称
24         /// </summary>
25         public string NickName { get; set; }
26 
27         public bool RememberMe { get; set; }
28     }
29 }

View Code

第四部创建UserStore类,该类通过继承接口IUserStore来实现用户存储在数据库的api

  1 using Microsoft.AspNet.Identity;
  2 using System;
  3 using System.Collections.Generic;
  4 using System.Data;
  5 using System.Data.SqlClient;
  6 using System.Linq;
  7 using System.Threading.Tasks;
  8 using System.Web;
  9 using System.Security.Claims;
 10 using IdeintityDemo.Models;
 11 using IdeintityDemo.Common;
 12 
 13 namespace IdeintityDemo.Identity
 14 {
 15 
 16     /// <summary>
 17     /// 用户持久化存储对象
 18     /// 必须实现Microsoft.AspNet.Identity相应接口，否则在SignInManager类进行登录校验过程中
 19     /// 会弹出未实现相关接口的异常！   
 20     /// IUserStore:检测是否存在账户
 21     /// IUserPasswordStore:校验密码
 22     /// IUserLockoutStore:锁定账户相关操作
 23     /// IUserClaimStore:存储用户特定的声明
 24     /// IUserEmailStore：邮箱关联、验证等相关操作
 25     /// IUserPhoneNumberStore:手机关联、验证相关操作
 26     /// IUserTwoFactorStore：获取或设置用户双重身份验证的方法。
 27     /// </summary>
 28     public class HsUserStore : Microsoft.AspNet.Identity.IUserStore<BASE_USER, Guid>,
 29                                Microsoft.AspNet.Identity.IUserPasswordStore<BASE_USER, Guid>,
 30                                Microsoft.AspNet.Identity.IUserLockoutStore<BASE_USER, Guid>,
 31                                Microsoft.AspNet.Identity.IUserClaimStore<BASE_USER, Guid>,
 32                                Microsoft.AspNet.Identity.IUserEmailStore<BASE_USER, Guid>,
 33                                Microsoft.AspNet.Identity.IUserPhoneNumberStore<BASE_USER, Guid>,
 34                                Microsoft.AspNet.Identity.IUserTwoFactorStore<BASE_USER, Guid>
 35     {
 36 
 37         /// <summary>
 38         /// 声明
 39         /// </summary>
 40         public IList<System.Security.Claims.Claim> Claims = null;
 41         /// <summary>
 42         /// 用户
 43         /// </summary>
 44         public BASE_USER UserIdentity = null;
 45 
 46         /// <summary>
 47         /// 实例化
 48         /// </summary>
 49         public HsUserStore()
 50         {
 51             //声明
 52             Claims = new List<System.Security.Claims.Claim>();
 53         }
 54         /// <summary>
 55         /// 创建用户
 56         /// </summary>
 57         /// <param name="user"></param>
 58         /// <returns></returns>
 59         public Task CreateAsync(BASE_USER user)
 60         {
 61             return Task.Run(() => {
 62                 string sql = @"INSERT INTO [dbo].[BASE_USER]([ID],[NAME],[PWD])
 63                         VALUES(@UserID,@name,@pwd)";
 64                 SqlParameter[] parameters = {
 65                      new SqlParameter("@UserID", Guid.NewGuid()),
 66                      new SqlParameter("@name", user.UserName),
 67                      new SqlParameter("@pwd", user.PWD)
 68                 };
 69                 int iResult = DbHelperSQL.ExecuteSql(sql, parameters);
 70             });
 71         }
 72         /// <summary>
 73         /// 删除用户
 74         /// </summary>
 75         /// <param name="user"></param>
 76         /// <returns></returns>
 77         public Task DeleteAsync(BASE_USER user)
 78         {
 79             return Task.Run(() => {
 80                 string sql = @"DELETE FROM [dbo].[BASE_USER] WHERE ID=@ID";
 81                 SqlParameter[] parameters = {
 82                      new SqlParameter("@UserID", user.Id)};
 83                 int iResult = DbHelperSQL.ExecuteSql(sql, parameters);
 84             });
 85         }
 86         /// <summary>
 87         /// 根据用户id获取用户
 88         /// </summary>
 89         /// <param name="userId"></param>
 90         /// <returns></returns>
 91         public Task<BASE_USER> FindByIdAsync(Guid userId)
 92         {
 93             return Task<BASE_USER>.Run(() =>
 94              {
 95                  BASE_USER result = new BASE_USER();
 96                  string sql = @"SELECT * FROM [dbo].[BASE_USER] WHERE ID=@ID";
 97                  SqlParameter[] parameters = {
 98                      new SqlParameter("@ID", userId)};
 99                  DataSet ds = DbHelperSQL.Query(sql, parameters);
100                  if (ds == null || ds.Tables == null || ds.Tables[0].Rows.Count <= 0)
101                      return result;
102                  //model
103                  DataRow dr = ds.Tables[0].Rows[0];
104                  result.Id = Guid.Parse(dr["ID"].ToString());
105                  result.UserName = dr["NAME"].ToString();
106                  result.PWD = dr["PWD"].ToString();
107                  return result;
108              });
109         }
110         /// <summary>
111         /// 根据名称获取用户信息
112         /// </summary>
113         /// <param name="userName"></param>
114         /// <returns></returns>
115         public Task<BASE_USER> FindByNameAsync(string userName)
116         {
117             return Task<BASE_USER>.Run(() =>
118             {
119                 BASE_USER result = new BASE_USER();
120                 string sql = @"SELECT * FROM [dbo].[BASE_USER] WHERE NAME=@NAME";
121                 SqlParameter[] parameters = {
122                      new SqlParameter("@NAME", userName)};
123                 DataSet ds = DbHelperSQL.Query(sql, parameters);
124                 if (ds == null || ds.Tables == null || ds.Tables[0].Rows.Count <= 0)
125                     return result;
126                 //model
127                 DataRow dr = ds.Tables[0].Rows[0];
128                 result.Id = Guid.Parse(dr["ID"].ToString());
129                 result.UserName = dr["NAME"].ToString();
130                 result.PWD = dr["PWD"].ToString();
131 
132                 return result;
133             });
134         }
135         /// <summary>
136         /// 更新用户
137         /// </summary>
138         /// <param name="user"></param>
139         /// <returns></returns>
140         public Task UpdateAsync(BASE_USER user)
141         {
142             return Task.Run(() =>
143             {
144                 //省略...
145             });
146         }
147         /// <summary>
148         /// 异步返回当前失败的访问尝试次数。当密码被验证或帐户被锁定时，这个数字通常会被重置。
149         /// (这里因为我数据库里没有去做这一块的记录保存，所以先写死返回1)
150         /// </summary>
151         /// <param name="user">用户</param>
152         /// <returns></returns>
153         public Task<int> GetAccessFailedCountAsync(BASE_USER user)
154         {
155             return Task.FromResult<int>(1);
156         }
157         /// <summary>
158         /// 获取锁定状态
159         /// </summary>
160         /// <param name="user"></param>
161         /// <returns></returns>
162         public Task<bool> GetLockoutEnabledAsync(BASE_USER user)
163         {
164             return Task.FromResult<bool>(false);
165         }
166         /// <summary>
167         /// 获取锁定结束时间
168         /// </summary>
169         /// <param name="user"></param>
170         /// <returns></returns>
171         public Task<DateTimeOffset> GetLockoutEndDateAsync(BASE_USER user)
172         {
173             throw new NotImplementedException();
174         }
175         /// <summary>
176         /// 记录试图访问用户失败的记录。
177         /// </summary>
178         /// <param name="user"></param>
179         /// <returns></returns>
180         public Task<int> IncrementAccessFailedCountAsync(BASE_USER user)
181         {
182             return Task.FromResult<int>(1);
183         }
184         /// <summary>
185         /// 重置访问失败计数，通常在帐户成功访问之后
186         /// </summary>
187         /// <param name="user"></param>
188         /// <returns></returns>
189         public Task ResetAccessFailedCountAsync(BASE_USER user)
190         {
191             return Task.FromResult(false);
192         }
193         /// <summary>
194         /// 异步设置是否可以锁定用户。
195         /// </summary>
196         /// <param name="user"></param>
197         /// <param name="enabled"></param>
198         /// <returns></returns>
199         public Task SetLockoutEnabledAsync(BASE_USER user, bool enabled)
200         {
201             return Task.Run(() => { });
202         }
203         /// <summary>
204         /// 异步锁定用户直到指定的结束日期
205         /// </summary>
206         /// <param name="user"></param>
207         /// <param name="lockoutEnd"></param>
208         /// <returns></returns>
209         public Task SetLockoutEndDateAsync(BASE_USER user, DateTimeOffset lockoutEnd)
210         {
211             return Task.Run(() =>
212             {
213 
214             });
215         }
216         /// <summary>
217         /// 获取用户密码
218         /// </summary>
219         /// <param name="user"></param>
220         /// <returns></returns>
221         public Task<string> GetPasswordHashAsync(BASE_USER user)
222         {
223             return Task<string>.Run(() =>
224             {
225                 return user.PWD;
226             });
227         }
228         /// <summary>
229         /// 是否有密码
230         /// </summary>
231         /// <param name="user"></param>
232         /// <returns></returns>
233         public Task<bool> HasPasswordAsync(BASE_USER user)
234         {
235             return Task.FromResult<bool>(!string.IsNullOrEmpty(user.PWD));
236         }
237         /// <summary>
238         /// 密码进行加密
239         /// </summary>
240         /// <param name="user"></param>
241         /// <param name="passwordHash"></param>
242         /// <returns></returns>
243         public Task SetPasswordHashAsync(BASE_USER user, string passwordHash)
244         {
245             return Task.Run(() =>
246             {
247                 user.PWD = passwordHash;//加密后
248             });
249         }
250         /// <summary>
251         /// 添加一个声明
252         /// </summary>
253         /// <param name="user"></param>
254         /// <param name="claim"></param>
255         /// <returns></returns>
256         public Task AddClaimAsync(BASE_USER user, Claim claim)
257         {
258             return Task.Run(() => { Claims.Add(claim); });
259         }
260         /// <summary>
261         /// 获取改用户的所有声明
262         /// </summary>
263         /// <param name="user"></param>
264         /// <returns></returns>
265         public Task<IList<Claim>> GetClaimsAsync(BASE_USER user)
266         {
267             return Task.Run<IList<System.Security.Claims.Claim>>(() =>
268             {
269                 IList<System.Security.Claims.Claim> list = new List<System.Security.Claims.Claim>();
270                 return list;
271             });
272         }
273         /// <summary>
274         /// 移除申明
275         /// </summary>
276         /// <param name="user"></param>
277         /// <param name="claim"></param>
278         /// <returns></returns>
279         public Task RemoveClaimAsync(BASE_USER user, Claim claim)
280         {
281             return Task.Run(() =>
282             {
283 
284             });
285         }
286         /// <summary>
287         /// 通过邮箱获取对应的用户信息
288         /// </summary>
289         /// <param name="email"></param>
290         /// <returns></returns>
291         public Task<BASE_USER> FindByEmailAsync(string email)
292         {
293             return Task<BASE_USER>.Run(() => new BASE_USER());
294         }
295         /// <summary>
296         /// 获取邮箱
297         /// </summary>
298         /// <param name="user"></param>
299         /// <returns></returns>
300         public Task<string> GetEmailAsync(BASE_USER user)
301         {
302             return Task<string>.Run(() => string.Empty);
303         }
304         /// <summary>
305         /// 确认邮箱
306         /// </summary>
307         /// <param name="user"></param>
308         /// <returns></returns>
309         public Task<bool> GetEmailConfirmedAsync(BASE_USER user)
310         {
311             return Task.FromResult<bool>(true);
312         }
313         /// <summary>
314         /// 修改邮箱
315         /// </summary>
316         /// <param name="user"></param>
317         /// <param name="email"></param>
318         /// <returns></returns>
319         public Task SetEmailAsync(BASE_USER user, string email)
320         {
321             return Task.Run(() => { });
322         }
323         /// <summary>
324         ///设置用户是否邮箱确认 
325         /// </summary>
326         /// <param name="user"></param>
327         /// <param name="confirmed"></param>
328         /// <returns></returns>
329         public Task SetEmailConfirmedAsync(BASE_USER user, bool confirmed)
330         {
331             throw new NotImplementedException();
332         }
333         /// <summary>
334         /// 获取联系电话
335         /// </summary>
336         /// <param name="user"></param>
337         /// <returns></returns>
338         public Task<string> GetPhoneNumberAsync(BASE_USER user)
339         {
340             return Task.FromResult<string>(string.Empty);
341         }
342         /// <summary>
343         /// 获取用户电话号码是否已确认
344         /// </summary>
345         /// <param name="user"></param>
346         /// <returns></returns>
347         public Task<bool> GetPhoneNumberConfirmedAsync(BASE_USER user)
348         {
349             return Task.FromResult<bool>(true);
350         }
351         /// <summary>
352         /// 设置用户电话号码
353         /// </summary>
354         /// <param name="user"></param>
355         /// <param name="phoneNumber"></param>
356         /// <returns></returns>
357         public Task SetPhoneNumberAsync(BASE_USER user, string phoneNumber)
358         {
359             return Task.Run(() => { });
360         }
361         /// <summary>
362         /// 设置与用户关联的电话号码
363         /// </summary>
364         /// <param name="user"></param>
365         /// <param name="confirmed"></param>
366         /// <returns></returns>
367         public Task SetPhoneNumberConfirmedAsync(BASE_USER user, bool confirmed)
368         {
369             return Task.Run(() => { });
370         }
371         /// <summary>
372         /// 是否为用户启用了双重身份验证。
373         /// </summary>
374         /// <param name="user"></param>
375         /// <returns></returns>
376         public Task<bool> GetTwoFactorEnabledAsync(BASE_USER user)
377         {
378             return Task.FromResult<bool>(false);
379         }
380         /// <summary>
381         /// 设置双重身份验证
382         /// </summary>
383         /// <param name="user"></param>
384         /// <param name="enabled"></param>
385         /// <returns></returns>
386         public Task SetTwoFactorEnabledAsync(BASE_USER user, bool enabled)
387         {
388             throw new NotImplementedException();
389         }
390         /// <summary>
391         /// 释放
392         /// </summary>
393         public void Dispose()
394         {
395             throw new NotImplementedException();
396         }
397 
398     }
399 }

View Code

第五步继承UserManager类

 1 using System;
 2 using System.Collections.Generic;
 3 using System.Linq;
 4 using System.Web;
 5 using IdeintityDemo.Models;
 6 using Microsoft.AspNet.Identity;
 7 
 8 namespace IdeintityDemo.Identity
 9 {
10     public class HsUserManager:UserManager<BASE_USER,Guid>
11     {
12         /// <summary>
13         /// 通过构造函数注入用户存储实现类
14         /// </summary>
15         /// <param name="store"></param>
16         public HsUserManager(HsUserStore store) : base(store)
17         {
18 
19         }        
20     }
21 }

View Code

上面的代码特别特别简单,但是确很重要，你就理解为将上面定义的HsUserStore注入到一个IOC容器里就好了。如果不注入，你对用户的所有读写db操作都没有，后续整个登录、注册、验证业务都无法实施！

第六步继承SignInManager 类

SignInManager类是Microsoft.AspNet.Identity.Owin命名空间下的,集成了用户登录进行管理的相关API，是Asp.Net.Identity里必不可少的处理类

我们需要自定义一个登录管理类，继承SignInManager。

 1 using System;
 2 using System.Collections.Generic;
 3 using System.Linq;
 4 using System.Web;
 5 using IdeintityDemo.Models;
 6 using Microsoft.AspNet.Identity;
 7 using Microsoft.AspNet.Identity.Owin;
 8 using Microsoft.Owin;
 9 using System.Threading.Tasks;
10 using Microsoft.Owin.Security;
11 
12 namespace IdeintityDemo.Identity
13 {
14     /// <summary>
15     /// 登录管理，此处用到了UserManager
16     /// </summary>
17     public class HsSignInManager : SignInManager<BASE_USER, Guid>
18     {
19 
20         /// <summary>
21         /// 构造函数
22         /// </summary>
23         /// <param name="UserManager"></param>
24         /// <param name="AuthenticationManager"></param>
25         public HsSignInManager(Microsoft.AspNet.Identity.UserManager<BASE_USER, Guid> UserManager, Microsoft.Owin.Security.IAuthenticationManager AuthenticationManager)
26             : base(UserManager, AuthenticationManager)
27         {
28 
29         }
30 
31         /// <summary>
32         /// 根据用户名密码，验证用户登录
33         /// </summary>
34         /// <param name="userName"></param>
35         /// <param name="password"></param>
36         /// <param name="isPersistent"></param>
37         /// <param name="shouldLockout"></param>
38         /// <returns></returns>
39         public override System.Threading.Tasks.Task<Microsoft.AspNet.Identity.Owin.SignInStatus> PasswordSignInAsync(string userName,
40                                                                                                                      string password,
41                                                                                                                      bool isPersistent,
42                                                                                                                      bool shouldLockout)
43         {
44             /*这里可以直接通过PasswordSignInAsync来校验，也可以重写~ */
45             //这里用Find方法会返回空的user。。。搞不懂。。
46             var user = base.UserManager.FindByName<BASE_USER, Guid>(userName);
47             if (user == null || user.Id == Guid.Empty)
48                 return Task.FromResult<SignInStatus>(SignInStatus.Failure);
49             else if (user.PWD != password)
50                 return Task.FromResult<SignInStatus>(SignInStatus.Failure);
51             else
52             {
53                 /*这个时候如果不写入到cooks里，在Home控制器的Index action里会被系统的
54                     Authorize刷选器拦截*/
55                 // 利用ASP.NET Identity获取identity 对象
56                 var identity = base.UserManager.CreateIdentityAsync(user, DefaultAuthenticationTypes.ApplicationCookie);
57                 // 将上面拿到的identity对象登录
58                 base.AuthenticationManager.SignIn(new AuthenticationProperties()
59                 { IsPersistent = true }, identity.Result);
60                 return Task.FromResult<SignInStatus>(SignInStatus.Success);
61             }
62             /*这里如果你想直接使用微软的登入方法也可以，直接base.就ok啦*/
63             //return base.PasswordSignInAsync(userName,
64             //                                password,
65             //                                isPersistent,
66             //                                shouldLockout);
67         }
68 
69 
70     }
71 }

View Code

上面最重要的方法就是PasswordSignInAsync,这个方法就是登入方法。

可以说我们封装的工作已经完成了，封装了三个类

现在我们看Controller里的代码是怎么写的吧~

这是注册的Action,所属Controller当然是AccountController啦。。

 1  /// <summary>
 2         /// 注册
 3         /// </summary>
 4         /// <returns></returns>
 5         [HttpPost]
 6         [AllowAnonymous]
 7         public async Task<ActionResult> Register(BASE_USER user)
 8         { 
 9             Microsoft.Owin.IOwinContext OwinContext = HttpContext.GetOwinContext();
10             //用户储存
11             HsUserStore userStore = new HsUserStore();
12             //UserManager
13             HsUserManager UserManager = new HsUserManager(userStore);
14             IdentityResult result = await UserManager.CreateAsync(user);
15             if (result.Succeeded)
16             {
17                 Response.Write("注册成功！");
18                 return RedirectToAction("index", "home");
19             }
20             return View();
21         }
22 
23         [AllowAnonymous]
24         public ActionResult Register()
25         {
26             return View();
27         }

View Code

接下来是登录的Action代码~

 1         [AllowAnonymous]
 2         public ActionResult Login()
 3         {
 4             return View();
 5         }
 6 
 7 
 8         [HttpPost]
 9         [AllowAnonymous]
10         public async Task<ActionResult> Login(BASE_USER user)
11         {
12             if (string.IsNullOrEmpty(user.UserName)) { return View(); }
13             if (string.IsNullOrEmpty(user.PWD)) { return View(); }
14             //Context
15             Microsoft.Owin.IOwinContext OwinContext = HttpContext.GetOwinContext();
16             //实例化UserStore对象
17             HsUserStore userStore = new HsUserStore();
18             //UserManager
19             HsUserManager userManager = new HsUserManager(userStore);
20             //授权对象
21             IAuthenticationManager autherticationManager = OwinContext.Authentication;
22             //登录管理对象
23             HsSignInManager signManager = new HsSignInManager(userManager, autherticationManager);
24 
25             //登录
26             Microsoft.AspNet.Identity.Owin.SignInStatus SignInStatus = Microsoft.AspNet.Identity.Owin.SignInStatus.Failure;
27             try
28             {
29                 SignInStatus = await signManager.PasswordSignInAsync(user.UserName,
30                                                                      user.PWD,
31                                                                      true,
32                                                                      shouldLockout: false);
33              
34             }catch(Exception ea)
35             {
36                  
37             }
38             //登录状态
39             switch (SignInStatus)
40             {
41                 //成功 同一个Control里跳转直接使用RecirectToAction(ActionName) 
42                 case Microsoft.AspNet.Identity.Owin.SignInStatus.Success:                
43                     //不同控制器使用RedirectToAction
44                     return RedirectToAction("Index", "Home"); //可以直接跳到别的Controller.                
45                 //锁定
46                 case Microsoft.AspNet.Identity.Owin.SignInStatus.LockedOut:
47                     Response.Write("账户被锁定啦~~~!");
48                     break;
49                 //失败
50                 case Microsoft.AspNet.Identity.Owin.SignInStatus.Failure:
51                     Response.Write("登录失败啦~~~!");
52                     break;
53                 //要求验证
54                 case Microsoft.AspNet.Identity.Owin.SignInStatus.RequiresVerification:
55                     Response.Write("需要验证!");
56                     break;
57 
58             }
59             return View();
60         }