88 lines
2.4 KiB
C#
88 lines
2.4 KiB
C#
|
using Microsoft.AspNetCore.Mvc;
|
|||
|
|
using Microsoft.AspNetCore.Mvc.Filters;
|
|||
|
|
using HT.Cloud.Code;
|
|||
|
|
using HT.Cloud.Service.SystemOrganize;
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
/// 权限验证
|
|||
|
|
/// </summary>
|
|||
|
|
namespace HT.Cloud.Web
|
|||
|
|
{
|
|||
|
|
public class HandlerAuthorizeAttribute : ActionFilterAttribute
|
|||
|
|
{
|
|||
|
|
private readonly bool _needAuth;
|
|||
|
|
|
|||
|
|
private string _authorize { get; set; }
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
/// 权限特性
|
|||
|
|
/// </summary>
|
|||
|
|
/// <param name="authorize">权限参数</param>
|
|||
|
|
/// <param name="needAuth">是否鉴权</param>
|
|||
|
|
public HandlerAuthorizeAttribute(string authorize = "", bool needAuth = true)
|
|||
|
|
{
|
|||
|
|
_authorize = authorize.ToLower();
|
|||
|
|
_needAuth = needAuth;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
public override void OnActionExecuting(ActionExecutingContext filterContext)
|
|||
|
|
{
|
|||
|
|
if (OperatorProvider.Provider.GetCurrent() != null && OperatorProvider.Provider.GetCurrent().IsSuperAdmin)
|
|||
|
|
{
|
|||
|
|
return;
|
|||
|
|
}
|
|||
|
|
if (!_needAuth)
|
|||
|
|
{
|
|||
|
|
return;
|
|||
|
|
}
|
|||
|
|
if (!string.IsNullOrEmpty(_authorize) && AuthorizeCheck(filterContext))
|
|||
|
|
{
|
|||
|
|
return;
|
|||
|
|
}
|
|||
|
|
if (!ActionAuthorize(filterContext))
|
|||
|
|
{
|
|||
|
|
OperatorProvider.Provider.EmptyCurrent("pc_").GetAwaiter().GetResult();
|
|||
|
|
//filterContext.HttpContext.Response.WriteAsync("<script>top.location.href ='" + filterContext.HttpContext.Request.PathBase + "/Home/Error?msg=403" + "';if(document.all) window.event.returnValue = false;</script>");
|
|||
|
|
filterContext.Result = new RedirectResult(filterContext.HttpContext.Request.PathBase + "/Home/Error?msg=403");
|
|||
|
|
return;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private bool ActionAuthorize(ActionExecutingContext filterContext)
|
|||
|
|
{
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
OperatorResult result = OperatorProvider.Provider.IsOnLine("pc_").GetAwaiter().GetResult();
|
|||
|
|
if (result.stateCode <= 0)
|
|||
|
|
{
|
|||
|
|
return false;
|
|||
|
|
}
|
|||
|
|
var action = GlobalContext.HttpContext.Request.Path;
|
|||
|
|
return GlobalContext.GetRequiredService<RoleAuthorizeService>().ActionValidate(action).GetAwaiter().GetResult();
|
|||
|
|
}
|
|||
|
|
catch (System.Exception ex)
|
|||
|
|
{
|
|||
|
|
LogHelper.WriteWithTime(ex);
|
|||
|
|
return false;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private bool AuthorizeCheck(ActionExecutingContext filterContext)
|
|||
|
|
{
|
|||
|
|
try
|
|||
|
|
{
|
|||
|
|
OperatorResult result = OperatorProvider.Provider.IsOnLine("pc_").GetAwaiter().GetResult();
|
|||
|
|
if (result.stateCode <= 0)
|
|||
|
|
{
|
|||
|
|
return false;
|
|||
|
|
}
|
|||
|
|
return GlobalContext.GetRequiredService<RoleAuthorizeService>().ActionValidate(_authorize, true).GetAwaiter().GetResult();
|
|||
|
|
}
|
|||
|
|
catch (System.Exception ex)
|
|||
|
|
{
|
|||
|
|
LogHelper.WriteWithTime(ex);
|
|||
|
|
return false;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|