ASP.NET MVC 5 WEB API 用户验证

参考博客：ASP.NET MVC5+EF6+EasyUI 后台管理系统（65）-MVC WebApi 用户验证 (1)

参考博客：MVC WebApi 用户验证 (2)构建ASP.NET MVC5+EF6+EasyUI 1.4.3+Unity4.x注入的后台管理系统（66）-MVC WebApi 用户验证 (2)

登录接口代码：

        #region 登录验证
        /// <summary>
        /// 登录验证
        /// </summary>
        /// <param name="userName">用户名</param>
        /// <param name="password">密码</param>
        /// <returns></returns>
        [HttpGet]
        [AllowAnonymous]
        public common.HttpResult verification(string userName, string password)
        {
            common.HttpResult result = new common.HttpResult();
            //string pwd = utils.MD5Helper.ConvertMD5(password);
            models.sys_user login = bll.sysUserManager.GetExistUser(userName, password);
            if (login != null)
            {
                FormsAuthenticationTicket token = , userName, DateTime.Now,
                            DateTime.Now.AddHours(), true, string.Format("{0}&{1}", userName, password),
                            FormsAuthentication.FormsCookiePath);
                //返回登录结果、用户信息、用户验证票据信息
                var Token = FormsAuthentication.Encrypt(token);
                //将身份信息保存在session中，验证当前请求是否是有效请求
                HttpContext.Current.Session[userName] = Token;

                result.state = common.ResultType.success.ToString();
                //result.message = lang.message.LOGINSUCCESS;
                result.message = Token;
                result.data = login;

                common.LogHelper.Info(this.GetType().FullName, "verification", login.userID + "    " + lang.message.LOGINSUCCESS);
            }
            else
            {
                result.state = common.ResultType.error.ToString();
                result.message = lang.message.LOGINFAIL;
            }
            return result;
        }
        #endregion

由于WEB API默认不支持SESSION，需要在Global.asax.cs中添加SESSION支持

        public override void Init()
        {
            //手动在 Global 开启 session 支持
            this.AuthenticateRequest += MvcApplication_AuthenticateRequest;
            base.Init();
        }

        void MvcApplication_AuthenticateRequest(object sender, EventArgs e)
        {
            //启用 webapi 支持session 会话
            HttpContext.Current.SetSessionStateBehavior(System.Web.SessionState.SessionStateBehavior.Required);
        }

js访问代码：

                    $.ajax({
                        url: "api/sysUser",
                        data: { userName: $.trim($username.val()), password: $.md5($.trim($password.val())) },
                        type: "get",
                        dataType: "json",
                        success: function (data) {
                            if (data.state == "success") {
                                $("#login").find('span').html("登录成功，正在跳转...");
                                alert("登录成功:Token" + data.message);
                                window.setTimeout(function () {
                                    window.location.href = "/main/index";
                                }, 500);
                            } else {
                                $("#login").find('span').html("登录");
                                $.login.message(data.message);
                            }
                        }
                    });