using Masuit.MyBlogs.Core.Common; using Masuit.MyBlogs.Core.Configs; using Masuit.MyBlogs.Core.Extensions.Hangfire; using Masuit.MyBlogs.Core.Infrastructure.Services.Interface; using Masuit.MyBlogs.Core.Models.DTO; using Masuit.MyBlogs.Core.Models.Enum; using Masuit.MyBlogs.Core.Models.ViewModel; using Masuit.Tools; using Masuit.Tools.AspNetCore.ResumeFileResults.Extensions; using Masuit.Tools.Core.Net; using Masuit.Tools.Security; using Masuit.Tools.Strings; using Microsoft.AspNetCore.Http; using Microsoft.AspNetCore.Mvc; using System; using System.Web; namespace Masuit.MyBlogs.Core.Controllers { /// /// 登录授权 /// [ApiExplorerSettings(IgnoreApi = true)] public class PassportController : Controller { /// /// 用户 /// public IUserInfoService UserInfoService { get; set; } /// /// 客户端的真实IP /// public string ClientIP => HttpContext.Connection.RemoteIpAddress.MapToIPv4().ToString(); /// /// /// /// /// /// /// public ActionResult ResultData(object data, bool isTrue = true, string message = "") { return Json(new { Success = isTrue, Message = message, Data = data }); } /// /// 登录页 /// /// public ActionResult Login() { var keys = RsaCrypt.GenerateRsaKeys(RsaKeyType.PEM); Response.Cookies.Append("PublicKey", keys.PublicKey); HttpContext.Session.Set("PrivateKey", keys.PrivateKey); string from = Request.Query["from"]; if (!string.IsNullOrEmpty(from)) { from = HttpUtility.UrlDecode(from); Response.Cookies.Append("refer", from); } if (HttpContext.Session.Get(SessionKey.UserInfo) != null) { if (string.IsNullOrEmpty(from)) { return RedirectToAction("Index", "Home"); } return LocalRedirect(from); } if (Request.Cookies.Count > 2) { string name = Request.Cookies["username"]; string pwd = Request.Cookies["password"]?.DesDecrypt(AppConfig.BaiduAK); var userInfo = UserInfoService.Login(name, pwd); if (userInfo != null) { Response.Cookies.Append("username", name, new CookieOptions() { Expires = DateTime.Now.AddDays(7), SameSite = SameSiteMode.Lax }); Response.Cookies.Append("password", Request.Cookies["password"], new CookieOptions() { Expires = DateTime.Now.AddDays(7), SameSite = SameSiteMode.Lax }); HttpContext.Session.Set(SessionKey.UserInfo, userInfo); HangfireHelper.CreateJob(typeof(IHangfireBackJob), nameof(HangfireBackJob.LoginRecord), "default", userInfo, ClientIP, LoginType.Default); if (string.IsNullOrEmpty(from)) { return RedirectToAction("Index", "Home"); } return LocalRedirect(from); } } return View(); } /// /// 登陆检查 /// /// /// /// /// /// [HttpPost, ValidateAntiForgeryToken] public ActionResult Login(string username, string password, string valid, string remem) { string validSession = HttpContext.Session.Get("valid") ?? string.Empty; //将验证码从Session中取出来,用于登录验证比较 if (string.IsNullOrEmpty(validSession) || !valid.Trim().Equals(validSession, StringComparison.InvariantCultureIgnoreCase)) { return ResultData(null, false, "验证码错误"); } HttpContext.Session.Remove("valid"); //验证成功就销毁验证码Session,非常重要 if (string.IsNullOrEmpty(username.Trim()) || string.IsNullOrEmpty(password.Trim())) { return ResultData(null, false, "用户名或密码不能为空"); } password = password.RSADecrypt(HttpContext.Session.Get("PrivateKey")); var userInfo = UserInfoService.Login(username, password); if (userInfo == null) { return ResultData(null, false, "用户名或密码错误"); } HttpContext.Session.Set(SessionKey.UserInfo, userInfo); if (remem.Trim().Contains(new[] { "on", "true" })) //是否记住登录 { Response.Cookies.Append("username", HttpUtility.UrlEncode(username.Trim()), new CookieOptions() { Expires = DateTime.Now.AddDays(7), SameSite = SameSiteMode.Lax }); Response.Cookies.Append("password", password.Trim().DesEncrypt(AppConfig.BaiduAK), new CookieOptions() { Expires = DateTime.Now.AddDays(7), SameSite = SameSiteMode.Lax }); } HangfireHelper.CreateJob(typeof(IHangfireBackJob), nameof(HangfireBackJob.LoginRecord), "default", userInfo, ClientIP, LoginType.Default); string refer = Request.Cookies["refer"]; Response.Cookies.Delete(nameof(RsaKey.PublicKey)); Response.Cookies.Delete("refer"); HttpContext.Session.Remove(nameof(RsaKey.PrivateKey)); return ResultData(null, true, string.IsNullOrEmpty(refer) ? "/" : refer); } /// /// 生成验证码 /// /// public ActionResult ValidateCode() { string code = Tools.Strings.ValidateCode.CreateValidateCode(6); HttpContext.Session.Set("valid", code); //将验证码生成到Session中 var buffer = HttpContext.CreateValidateGraphic(code); return this.ResumeFile(buffer, "image/jpeg"); } /// /// 检查验证码 /// /// /// [HttpPost] public ActionResult CheckValidateCode(string code) { string validSession = HttpContext.Session.Get("valid"); if (string.IsNullOrEmpty(validSession) || !code.Trim().Equals(validSession, StringComparison.InvariantCultureIgnoreCase)) { return ResultData(null, false, "验证码错误"); } return ResultData(null, false, "验证码正确"); } /// /// 获取用户信息 /// /// public ActionResult GetUserInfo() { var user = HttpContext.Session.Get(SessionKey.UserInfo); #if DEBUG user = UserInfoService.GetByUsername("masuit").Mapper(); #endif return ResultData(user); } /// /// 注销登录 /// /// public ActionResult Logout() { HttpContext.Session.Remove(SessionKey.UserInfo); Response.Cookies.Delete("username"); Response.Cookies.Delete("password"); HttpContext.Session.Clear(); return Request.Method.Equals(HttpMethods.Get) ? RedirectToAction("Index", "Home") : ResultData(null, message: "注销成功!"); } } }