asp.net身份验证和授权
login.aspx HTML代码
<%@ Page language="c#" Codebehind="02Login.aspx.cs" AutoEventWireup="false" Inherits="身份验证._02Login" %>
2<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" >
3<HTML>
4 <HEAD>
5 <title>02Login</title>
6 <meta name="GENERATOR" Content="Microsoft Visual Studio .NET 7.1">
7 <meta name="CODE_LANGUAGE" Content="C#">
8 <meta name="vs_defaultClientScript" content="JavaScript">
9 <meta name="vs_targetSchema" content="http://schemas.microsoft.com/intellisense/ie5">
10 </HEAD>
11 <body MS_POSITIONING="GridLayout">
12 <form id="Form1" method="post" runat="server">
13 <FONT face="宋体">
14 <TABLE id="Table1" style="Z-INDEX: 102; LEFT: 152px; WIDTH: 446px; POSITION: absolute; TOP: 80px; HEIGHT: 72px"
15 cellSpacing="1" cellPadding="1" width="446" border="1">
16 <TR>
17 <TD>
18 <asp:label id="Label1" runat="server">用户名称：</asp:label></TD>
19 <TD>
20 <asp:textbox id="tbName" runat="server" Width="183px"></asp:textbox></TD>
21 <TD>
22 <asp:requiredfieldvalidator id="RequiredFieldValidator1" runat="server" ErrorMessage="用户名不能为空！" ControlToValidate="tbName"></asp:requiredfieldvalidator></TD>
23 </TR>
24 <TR>
25 <TD>
26 <asp:label id="Label2" runat="server">密码：</asp:label></TD>
27 <TD>
28 <asp:textbox id="tbPass" runat="server" Width="183px"></asp:textbox></TD>
29 <TD>
30 <asp:requiredfieldvalidator id="RequiredFieldValidator2" runat="server" ErrorMessage="密码不能为空！" ControlToValidate="tbPass"></asp:requiredfieldvalidator></TD>
31 </TR>
32 <TR>
33 <TD><FONT face="宋体">是否保存Cookie</FONT></TD>
34 <TD>
35 <asp:checkbox id="PersistCookie" runat="server"></asp:checkbox></TD>
36 <TD></TD>
37 </TR>
38 </TABLE>
39 <asp:button id="btnLoginBetter" style="Z-INDEX: 101; LEFT: 288px; POSITION: absolute; TOP: 240px"
40 runat="server" Width="78px" Text="登录"></asp:button>
41 <asp:HyperLink id="HyperLink1" style="Z-INDEX: 103; LEFT: 456px; POSITION: absolute; TOP: 240px"
42 runat="server" NavigateUrl="Default.aspx">HyperLink</asp:HyperLink></FONT>
43 </form>
44 </body>
45</HTML>
login.aspx.cs代码如下
1 private void btnLoginBetter_Click(object sender, System.EventArgs e)
2 {
3 if (this.tbName.Text == "admin" && this.tbPass.Text == "admin")
4 {
5 FormsAuthenticationTicket ticket = new FormsAuthenticationTicket(1,this.tbName.Text,DateTime.Now,DateTime.Now.AddMinutes(30),this.PersistCookie.Checked,"User");//创建一个验证票据
6 string cookieStr = FormsAuthentication.Encrypt(ticket);进行加密
7 HttpCookie cookie = new HttpCookie(FormsAuthentication.FormsCookieName,cookieStr);创建一个cookie，cookie名为web.config设置的名,值为加密后的数据cookieStr,
8 if (this.PersistCookie.Checked)//判断用户是否选中保存cookie
9 cookie.Expires = ticket.Expiration;//获取cookie过期时间
10 cookie.Path = FormsAuthentication.FormsCookiePath;//设置cookie保存路径
11 Response.Cookies.Add(cookie);
12 string strRedirect;
13 strRedirect = Request["ReturnUrl"];//取出返回url
14 if (strRedirect == null)
15 strRedirect = "Default.aspx";
16 Response.Redirect(strRedirect,true);
17
18 }
19 else
20 {
21 Response.Write("<script>alert('帐号或密码错误!');self.location.href='02login.aspx'</script>");
22 }
23 }
Default.aspx HTML代码
1 <body MS_POSITIONING="GridLayout">
2 <form id="Form1" method="post" runat="server">
3 <FONT face="宋体">
4 <asp:Label id="Label1" style="Z-INDEX: 106; LEFT: 224px; POSITION: absolute; TOP: 72px" runat="server">用户名称：</asp:Label>
5 <asp:Label id="Label2" style="Z-INDEX: 102; LEFT: 220px; POSITION: absolute; TOP: 136px" runat="server">身份：</asp:Label>
6 <asp:Label id="lbUser" style="Z-INDEX: 103; LEFT: 350px; POSITION: absolute; TOP: 79px" runat="server"></asp:Label>
7 <asp:Label id="lbSf" style="Z-INDEX: 104; LEFT: 355px; POSITION: absolute; TOP: 133px" runat="server"></asp:Label>
8 <asp:Button id="btnLogout" style="Z-INDEX: 105; LEFT: 261px; POSITION: absolute; TOP: 192px"
9 runat="server" Text="注销" Width="101px"></asp:Button></FONT>
10 </form>
11 </body>
后置代码
1 private void Page_Load(object sender, System.EventArgs e)
2 {
3 this.lbUser.Text = User.Identity.Name;
4 if (User.IsInRole("Admin"))
5 this.lbSf.Text = "Admin";
6 else
7 this.lbSf.Text = "User";
8 }
9
10 #region Web 窗体设计器生成的代码
11 override protected void OnInit(EventArgs e)
12 {
13 //
14 // CODEGEN: 该调用是 ASP.NET Web 窗体设计器所必需的。
15 //
16 InitializeComponent();
17 base.OnInit(e);
18 }
19
20 /// <summary>
21 /// 设计器支持所需的方法 - 不要使用代码编辑器修改
22 /// 此方法的内容。
23 /// </summary>
24 private void InitializeComponent()
25 {
26 this.btnLogout.Click += new System.EventHandler(this.btnLogout_Click);
27 this.Load += new System.EventHandler(this.Page_Load);
28
29 }
30 #endregion
31
32 private void btnLogout_Click(object sender, System.EventArgs e)
33 {
34 FormsAuthentication.SignOut();//注销票
35 Response.Redirect("login.aspx",true);返回login.aspx页面
36 }
webconfig配置如下
1 <authentication mode="Forms" >
2 <forms name=".SecurityDemo" loginUrl="login.aspx">//.SecurityDemo为cookie名,
3 </forms>
4 </authentication>
5
6 <authorization>
7 <deny users="?"/> //拒绝所有匿名用户
8 <allow roles="admins"/>//允许管理级别用户访问
9 </authorization>
自我感觉ASP写多了，一般是用session进行判断用户是否合法,但在一个ASP.NET项目中使用身份验证,基本上所有页面都要验证才能访问，可以在web.config页面对指定的页面设置权限,设置代码如下
1 <location path="admin">
2 <system.web>
3 <authorization>
4 <deny users="*" />
5 <allow roles="paley"/>
6 </authorization>
7 </system.web>
8 </location>
已看资料修如上．对admin文件夹设置权限，拒绝所有用户,允许paley访问
浙公网安备 33010602011771号