ASPNET MVC3技术要点(16)

ASPNET MVC3技术要点

MVC框架过滤使用的属性标志[属性名]，该标志加在动作函数前对该函数起过滤作用，该标志加在控制器前对所有动作函数起过滤作用。 3.3.1 身份验证过滤

3.3.1.1 创建自定义的身份验证过滤器

using System; using System.Linq; using System.Web.Mvc; using System.Web;

namespace ControllersAndActions.Infrastructure.Filters {

public class CustomAuthAttribute : AuthorizeAttribute {

private string[] allowedUsers;

public CustomAuthAttribute(params string[] users) {

allowedUsers = users; }

protected override bool AuthorizeCore(HttpContextBase httpContext) {

return httpContext.Request.IsAuthenticated && allowedUsers.Contains(, StringComparer.InvariantCultureIgnoreCase); } } }

它是AuthorizeAttribute子类，所以必须实现AccountController.cs

using System.Web.Mvc; using System.Web.Security; using ControllersAndActions.Models;

namespace ControllersAndActions.Controllers {

public class AccountController : Controller {

public ActionResult LogOn() {