高級打字員的技術雲

<add key="ClientValidationEnabled" value="true" />
<add key="UnobtrusiveJavaScriptEnabled" value="true" />

<script src="~/Scripts/jquery-2.1.0.js"></script>
<script src="~/Scripts/jquery.validate.js"></script>
<script src="~/Scripts/jquery.validate.unobtrusive.js"></script>

 <authentication mode="Forms">
      <!--defaultUrl：登入後到哪一頁，loginUrl：使用者未登入的話，要導至哪一頁-->
  <forms name="Demo_Site" 
             requireSSL="true"
             defaultUrl="~/Home/Index/" loginUrl="~/Home/Login/" 
             slidingExpiration="false" cookieless="UseCookies" protection="All"
             timeout="120" />
    </authentication>
 

using System;
using System.Collections.Generic;
using System.ComponentModel.DataAnnotations;
using System.Linq;
using System.Text;
using System.Web;

namespace FormLoginSample.ViewModels
{
    public class LoginVM : IValidatableObject
    {
        
        [DisplayFormat(ConvertEmptyStringToNull = false)]
        public string ReturnUrl { get; set; }

        /// <summary>
        /// 帳號
        /// </summary>
        [DisplayFormat(ConvertEmptyStringToNull = false)]
        [Required]
        public string Account { get; set; }

        /// <summary>
        /// 密碼
        /// </summary>
        [DisplayFormat(ConvertEmptyStringToNull = false)]
        [Required]
        public string Password { get; set; }


        public IEnumerable<ValidationResult> Validate(ValidationContext validationContext)
        {
            //將使用者輸入的字串轉成Base64String
            string base64Password = Convert.ToBase64String(Encoding.UTF8.GetBytes(Password));
             //todo到DB抓使用者資料
            //假如抓不到系統使用者資料
            //※為了Demo用這種寫法，實際請換成判斷DB的資料存不存在
            if (!(Account == "shadow" && base64Password == "c29ueQ=="))
            {
                yield return new ValidationResult("無此帳號或密碼", new string[] { "Account" });
            }
        }
    }
}

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.Mvc;
using System.Web.Security;
using FormLoginSample.ViewModels;

namespace FormLoginSample.Controllers
{
    /// <summary>
    /// 後台首頁、登入頁...
    /// </summary>
    [Authorize]
    public class HomeController : Controller
    {
   

        /// <summary>
        /// 呈現後台使用者登入頁
        /// </summary>
        /// <param name="ReturnUrl">使用者原本Request的Url</param>
        /// <returns></returns>
        [AllowAnonymous]
        public ActionResult Login(string ReturnUrl)
        {
            //ReturnUrl字串是使用者在未登入情況下要求的的Url
            LoginVM vm = new LoginVM() { ReturnUrl = ReturnUrl };
            return View(vm);
        }

        /// <summary>
        /// 後台使用者進行登入
        /// </summary>
        /// <param name="vm"></param>
        /// <param name="u">使用者原本Request的Url</param>
        /// <returns></returns>
        [AllowAnonymous]
        [HttpPost]
        public ActionResult Login(LoginVM vm)
        {

            //沒通過Model驗證(必填欄位沒填，DB無此帳密)
            if (!ModelState.IsValid)
            {
                return View(vm);
            }



            //都成功...
            //進行表單登入 ※之後使用User.Identity.Name的值就是vm.Account帳號的值
            FormsAuthentication.SetAuthCookie(vm.Account, false);
            //保哥文章使用 FormsAuthentication.RedirectFromLoginPage(帳號, false); 來登入也是可以
            //但要留意↑會做Redirect，如果後續有使用到Request.UrlReferrer.AbsoluteUri的話，值會改變


            //導向預設Url(Web.config裡的defaultUrl值)或 
            //使用者原先Request的Url(登入頁網址的QueryString：ReturnUrl，此QueryString在表單驗證機制下對於未登入的使用者會自動產生)
            return Redirect(FormsAuthentication.GetRedirectUrl(vm.Account, false));

 
        }
        /// <summary>
        /// 後台使用者登出動作
        /// </summary>
        /// <returns></returns>
        [AllowAnonymous]
        public ActionResult Logout()
        {
            //清除Session中的資料
            Session.Abandon();
            //登出表單驗證
            FormsAuthentication.SignOut();
            //導至登入頁
            return RedirectToAction("Login", "Home");
        }


        /// <summary>
        /// 後台首頁 
        /// </summary>
        /// <returns></returns>
        public ActionResult Index()
        {
            //取得目前登入者的帳號
            string Account = User.Identity.Name;
            //可以依帳號到DB抓登入者的資料...


           


            return View();
        }
        /// <summary>
        /// 測試用的
        /// </summary>
        /// <returns></returns>
        public ActionResult Index2()
        {
            //如果要判斷此登入者有沒有登入的寫法
            //if (User.Identity.IsAuthenticated)
            //{//目前已登入 
            //}
            return View();
        }
        

    }
}

@using FormLoginSample.ViewModels
@model LoginVM
@{
    Layout = null;
}

<!DOCTYPE html>

<html>
<head>
    <meta name="viewport" content="width=device-width" />
    <script src="~/Scripts/jquery-2.1.0.js"></script>
    <script src="~/Scripts/jquery.validate.js"></script>
    <script src="~/Scripts/jquery.validate.unobtrusive.js"></script>
    <title>Login</title>
</head>
<body>
    <div>
        @*如果↓表單的ReturnUrl沒給的話，就沒辦法導向使用者原先要求的頁面*@
         @using (Html.BeginForm("Login", "Home", new { ReturnUrl  = Model.ReturnUrl}, FormMethod.Post, new {   autocomplete = "off" }))
         {
            
                    @Html.TextBoxFor(m => m.Account ) @Html.ValidationMessageFor(m=>m.Account)
                              <br />
                    @Html.PasswordFor(m => m.Password ) @Html.ValidationMessageFor(m=>m.Password)
                              <br />
          
                   <input type="submit"   value="登入" /> 
               
         }
    </div>
</body>
</html>

<!DOCTYPE html>
<html>
<head>
    <title>Index</title>
</head>
<body>
    <div>
        <h1>Index</h1>
        <div><a href="@Url.Action("Logout","Home")">登出</a></div>
    </div>
</body>
</html>

<!DOCTYPE html>
<html>
<head>
    <title>Index2</title>
</head>
<body>
    <div>
        <h2>Index2</h2>
        <div><a href="@Url.Action("Logout","Home")">登出</a></div>
    </div>
</body>
</html>