转移.net core 3.1，为.NET 5做准备

OpenAuth.Mvc/Models/OpenAuthFilter.cs

@@ -0,0 +1,89 @@
+using System.Linq;
+using System.Reflection;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.Filters;
+using OpenAuth.App;
+using OpenAuth.App.Interface;
+using OpenAuth.Repository.Domain;
+
+namespace OpenAuth.Mvc.Models
+{
+    public class OpenAuthFilter : IActionFilter
+    {
+        private readonly IAuth _authUtil;
+        private readonly SysLogApp _logApp;
+
+        public OpenAuthFilter(IAuth authUtil, SysLogApp logApp)
+        {
+            _authUtil = authUtil;
+            _logApp = logApp;
+        }
+
+        public void OnActionExecuting(ActionExecutingContext context)
+        {
+            var description =
+                (Microsoft.AspNetCore.Mvc.Controllers.ControllerActionDescriptor)context.ActionDescriptor;
+
+            //添加有允许匿名的Action，可以不用登录访问，如Login/Index
+            var anonymous = description.MethodInfo.GetCustomAttribute(typeof(AllowAnonymousAttribute));
+            if (anonymous != null)
+            {
+                return;
+            }
+
+            if (!_authUtil.CheckLogin())
+            {
+                context.Result = new RedirectResult("/Login/Index");
+                return;
+            }
+
+            //------------------------以下内容都需要登录--------------------------------------------
+
+            //如果是ajax请求的，跳过模块授权认证
+            var headers = context.HttpContext.Request.Headers;
+            var xreq = headers.ContainsKey("x-requested-with");
+            if (xreq && headers["x-requested-with"] == "XMLHttpRequest")
+            {
+                return;
+            }
+
+            var Controllername = description.ControllerName.ToLower();
+            var Actionname = description.ActionName.ToLower();
+            //控制器白名单，在该名单中的控制器，需要登录，但不需要授权
+            var whiteController = new[] {"usersession","home","redirects"};
+            if (whiteController.Contains(Controllername))
+            {
+                return;
+            }
+            
+            //URL白名单
+            var whiteurls = new[] {"usermanager/changepassword", "usermanager/profile"};
+            if (whiteurls.Contains(Controllername + "/" + Actionname))
+            {
+                return;
+            }
+
+            var currentModule = _authUtil.GetCurrentUser().Modules.FirstOrDefault(u => u.Url.ToLower().Contains(Controllername));
+            //当前登录用户没有Action记录
+            if (currentModule == null)
+            {
+                context.Result = new RedirectResult("/Error/Auth");
+            }
+
+            _logApp.Add(new SysLog
+            {
+                Content = $"用户访问",
+                Href = $"{Controllername}/{Actionname}",
+                CreateName = _authUtil.GetUserName(),
+                CreateId = _authUtil.GetCurrentUser().User.Id,
+                TypeName = "访问日志"
+            });
+        }
+
+        public void OnActionExecuted(ActionExecutedContext context)
+        {
+            return;
+        }
+    }
+}