当前位置: 首页>>代码示例>>C#>>正文


C# HttpContextBase.ReadClaim方法代码示例

本文整理汇总了C#中System.Web.HttpContextBase.ReadClaim方法的典型用法代码示例。如果您正苦于以下问题:C# HttpContextBase.ReadClaim方法的具体用法?C# HttpContextBase.ReadClaim怎么用?C# HttpContextBase.ReadClaim使用的例子?那么恭喜您, 这里精选的方法代码示例或许可以为您提供帮助。您也可以进一步了解该方法所在System.Web.HttpContextBase的用法示例。


在下文中一共展示了HttpContextBase.ReadClaim方法的1个代码示例,这些例子默认根据受欢迎程度排序。您可以为喜欢或者感觉有用的代码点赞,您的评价将有助于系统推荐出更棒的C#代码示例。

示例1: IsAuthorized

        private bool IsAuthorized(HttpContextBase context)
        {
            if (context == null)
            {
                throw new ArgumentNullException(nameof(context));
            }

            var user = context.User as ClaimsPrincipal;

            if (user?.Identity == null)
            {
                return false;
            }

            long loginId = context.ReadClaim<long>("loginid");
            long userId = context.ReadClaim<int>("userid");
            long officeId = context.ReadClaim<int>("officeid");
            string email = context.ReadClaim<string>(ClaimTypes.Email);

            var expriesOn = new DateTime(context.ReadClaim<long>("exp"), DateTimeKind.Utc);
            string ipAddress = context.GetClientIpAddress();
            string userAgent = context.GetUserAgent();
            string clientToken = context.Request.GetClientToken();

            if (string.IsNullOrWhiteSpace(clientToken))
            {
                return false;
            }

            if (loginId <= 0)
            {
                Log.Warning(
                    "Invalid login claims supplied. Access was denied to user {userId}/{email} for officeId {officeId} having the loginId {loginId}. Token: {clientToken}.",
                    userId, email, officeId, loginId, clientToken);
                Thread.Sleep(new Random().Next(1, 60)*1000);
                return false;
            }

            if (expriesOn <= DateTime.UtcNow)
            {
                Log.Debug(
                    "Token expired. Access was denied to user {userId}/{email} for officeId {officeId} having the loginId {loginId}. Token: {clientToken}.",
                    userId, email, officeId, loginId, clientToken);
                return false;
            }

            bool isValid = AccessTokens.IsValid(clientToken, ipAddress, userAgent);

            if (expriesOn <= DateTime.UtcNow)
            {
                Log.Debug(
                    "Token invalid. Access was denied to user {userId}/{email} for officeId {officeId} having the loginId {loginId}. Token: {clientToken}.",
                    userId, email, officeId, loginId, clientToken);
                return false;
            }

            return isValid;
        }
开发者ID:manishkungwani,项目名称:frapid,代码行数:58,代码来源:RestrictAnonymousAttribute.cs


注:本文中的System.Web.HttpContextBase.ReadClaim方法示例由纯净天空整理自Github/MSDocs等开源代码及文档管理平台,相关代码片段筛选自各路编程大神贡献的开源项目,源码版权归原作者所有,传播和使用请参考对应项目的License;未经允许,请勿转载。