添加项目文件。

HT.Cloud.Web/Handler/HandlerAuthorizeAttribute.cs

@@ -0,0 +1,88 @@
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.Filters;
+using HT.Cloud.Code;
+using HT.Cloud.Service.SystemOrganize;
+
+/// <summary>
+/// 权限验证
+/// </summary>
+namespace HT.Cloud.Web
+{
+	public class HandlerAuthorizeAttribute : ActionFilterAttribute
+	{
+		private readonly bool _needAuth;
+
+		private string _authorize { get; set; }
+
+		/// <summary>
+		/// 权限特性
+		/// </summary>
+		/// <param name="authorize">权限参数</param>
+		/// <param name="needAuth">是否鉴权</param>
+		public HandlerAuthorizeAttribute(string authorize = "", bool needAuth = true)
+		{
+			_authorize = authorize.ToLower();
+			_needAuth = needAuth;
+		}
+
+		public override void OnActionExecuting(ActionExecutingContext filterContext)
+		{
+			if (OperatorProvider.Provider.GetCurrent() != null && OperatorProvider.Provider.GetCurrent().IsSuperAdmin)
+			{
+				return;
+			}
+			if (!_needAuth)
+			{
+				return;
+			}
+			if (!string.IsNullOrEmpty(_authorize) && AuthorizeCheck(filterContext))
+			{
+				return;
+			}
+			if (!ActionAuthorize(filterContext))
+			{
+				OperatorProvider.Provider.EmptyCurrent("pc_").GetAwaiter().GetResult();
+				//filterContext.HttpContext.Response.WriteAsync("<script>top.location.href ='" + filterContext.HttpContext.Request.PathBase + "/Home/Error?msg=403" + "';if(document.all) window.event.returnValue = false;</script>");
+				filterContext.Result = new RedirectResult(filterContext.HttpContext.Request.PathBase + "/Home/Error?msg=403");
+				return;
+			}
+		}
+
+		private bool ActionAuthorize(ActionExecutingContext filterContext)
+		{
+			try
+			{
+				OperatorResult result = OperatorProvider.Provider.IsOnLine("pc_").GetAwaiter().GetResult();
+				if (result.stateCode <= 0)
+				{
+					return false;
+				}
+				var action = GlobalContext.HttpContext.Request.Path;
+				return GlobalContext.GetRequiredService<RoleAuthorizeService>().ActionValidate(action).GetAwaiter().GetResult();
+			}
+			catch (System.Exception ex)
+			{
+				LogHelper.WriteWithTime(ex);
+				return false;
+			}
+		}
+
+		private bool AuthorizeCheck(ActionExecutingContext filterContext)
+		{
+			try
+			{
+				OperatorResult result = OperatorProvider.Provider.IsOnLine("pc_").GetAwaiter().GetResult();
+				if (result.stateCode <= 0)
+				{
+					return false;
+				}
+				return GlobalContext.GetRequiredService<RoleAuthorizeService>().ActionValidate(_authorize, true).GetAwaiter().GetResult();
+			}
+			catch (System.Exception ex)
+			{
+				LogHelper.WriteWithTime(ex);
+				return false;
+			}
+		}
+	}
+}