为了方便 ，特将这个 ManageProvider.cs 源码单独弄出来，便于上节和以后的使用

    1. using System;
    2. using System.Collections.Generic;
    3. using System.Linq;
    4. using System.Security.Principal;
    5. using System.Threading;
    6. using Microsoft.AspNetCore.Builder;
    7. using Microsoft.AspNetCore.Http;
    8. using Microsoft.Extensions.DependencyInjection.Extensions;
    9. using Microsoft.Net.Http.Headers;
    10. using NewLife.Cube.Extensions;
    11. using NewLife.Log;
    12. using NewLife.Model;
    13. using XCode;
    14. using XCode.Membership;
    15. using IServiceCollection = Microsoft.Extensions.DependencyInjection.IServiceCollection;
    16. using JwtBuilder = NewLife.Web.JwtBuilder;
    18. namespace NewLife.Cube
    19. {
    20.     /// <inheritdoc />
    21.     public class ManageProvider2 : ManageProvider
    22.     {
    23.         #region 静态实例
    24.         internal static IHttpContextAccessor Context;
    25.         #endregion
    27.         #region 属性
    28.         /// <summary>保存于Session的凭证</summary>
    29.         public String SessionKey { get; set; } = "Admin";
    30.         #endregion
    32.         ///// <summary>当前管理提供者</summary>
    33.         //public new static IManageProvider Provider => ObjectContainer.Current.ResolveInstance<IManageProvider>();
    35.         #region IManageProvider 接口
    36.         /// <summary>获取当前用户</summary>
    37.         /// <param name="context"></param>
    38.         /// <returns></returns>
    39.         public override IManageUser GetCurrent(IServiceProvider context = null)
    40.         {
    41.             var ctx = (context?.GetService<IHttpContextAccessor>() ?? Context)
    42.                 ?.HttpContext;
    43.             if (ctx == null) return null;
    45.             try
    46.             {
    47.                 if (ctx.Items["CurrentUser"] is IManageUser user) return user;
    49.                 var session = ctx.Items["Session"] as IDictionary<String, Object>;
    51.                 user = session?[SessionKey] as IManageUser;
    52.                 ctx.Items["CurrentUser"] = user;
    54.                 return user;
    55.             }
    56.             catch (InvalidOperationException ex)
    57.             {
    58.                 // 这里捕获一下，防止初始化应用中session还没初始化好报的异常
    59.                 // 这里有个问题就是这里的ctx会有两个不同的值
    60.                 XTrace.WriteException(ex);
    61.                 return null;
    62.             }
    63.         }
    65.         /// <summary>设置当前用户</summary>
    66.         /// <param name="user"></param>
    67.         /// <param name="context"></param>
    68.         public override void SetCurrent(IManageUser user, IServiceProvider context = null)
    69.         {
    70.             var ctx = (context?.GetService<IHttpContextAccessor>() ?? Context)
    71.                 ?.HttpContext;
    72.             if (ctx == null) return;
    74.             ctx.Items["CurrentUser"] = user;
    76.             var session = ctx.Items["Session"] as IDictionary<String, Object>;
    77.             if (session == null) return;
    79.             var key = SessionKey;
    80.             // 特殊处理注销
    81.             if (user == null)
    82.             {
    83.                 session.Remove(key);
    84.                 session.Remove("userId");
    85.             }
    86.             else
    87.             {
    88.                 session[key] = user;
    89.                 session["userId"] = user.ID;
    90.             }
    91.         }
    93.         /// <summary>登录</summary>
    94.         /// <param name="name"></param>
    95.         /// <param name="password"></param>
    96.         /// <param name="remember">是否记住密码</param>
    97.         /// <returns></returns>
    98.         public override IManageUser Login(String name, String password, Boolean remember)
    99.         {
    100.             XCode.Membership.User user;
    101.             try
    102.             {
    103.                 // 用户登录，依次支持用户名、邮箱、手机、编码
    104.                 var account = name.Trim();
    105.                 user = XCode.Membership.User.FindByName(account);
    106.                 if (user == null && account.Contains("@")) user = XCode.Membership.User.FindByMail(account);
    107.                 if (user == null && account.ToLong() > 0) user = XCode.Membership.User.FindByMobile(account);
    108.                 if (user == null) user = XCode.Membership.User.FindByCode(account);
    110.                 if (user == null) throw new EntityException("帐号{0}不存在！", account);
    111.                 if (!user.Enable) throw new EntityException("账号{0}被禁用！", account);
    113.                 // 数据库为空密码，任何密码均可登录
    114.                 if (!user.Password.IsNullOrEmpty())
    115.                 {
    116.                     var ss = password.Split(':');
    117.                     if (ss.Length <= 1)
    118.                     {
    119.                         if (!password.MD5().EqualIgnoreCase(user.Password)) throw new EntityException("密码不正确！");
    120.                     }
    121.                     else
    122.                     {
    123.                         var salt = ss[1];
    124.                         var pass = (user.Password.ToLower() + salt).MD5();
    125.                         if (!ss[0].EqualIgnoreCase(pass)) throw new EntityException("密码不正确！");
    126.                     }
    127.                 }
    129.                 // 保存登录信息
    130.                 user.Logins++;
    131.                 user.LastLogin = DateTime.Now;
    132.                 user.LastLoginIP = UserHost;
    133.                 user.Update();
    135.                 XCode.Membership.User.WriteLog("登录", true, $"用户[{user}]使用[{name}]登录成功");
    136.             }
    137.             catch (Exception ex)
    138.             {
    139.                 XCode.Membership.User.WriteLog("登录", false, name + "登录失败！" + ex.Message);
    140.                 throw;
    141.             }
    143.             Current = user;
    145.             // 过期时间
    146.             var set = Setting.Current;
    147.             var expire = TimeSpan.FromMinutes(0);
    148.             if (remember && user != null)
    149.             {
    150.                 expire = TimeSpan.FromDays(365);
    151.             }
    152.             else
    153.             {
    154.                 if (set.SessionTimeout > 0)
    155.                     expire = TimeSpan.FromSeconds(set.SessionTimeout);
    156.             }
    158.             // 保存Cookie
    159.             var context = Context?.HttpContext;
    160.             this.SaveCookie(user, expire, context);
    162.             return user;
    163.         }
    165.         /// <summary>注销</summary>
    166.         public override void Logout()
    167.         {
    168.             // 注销时销毁所有Session
    169.             var context = Context?.HttpContext;
    170.             var session = context.Items["Session"] as IDictionary<String, Object>;
    171.             session?.Clear();
    173.             // 销毁Cookie
    174.             this.SaveCookie(null, TimeSpan.Zero, context);
    176.             base.Logout();
    177.         }
    178.         #endregion
    179.     }
    181.     /// <summary>管理提供者助手</summary>
    182.     public static class ManagerProviderHelper
    183.     {
    184.         /// <summary>设置当前用户</summary>
    185.         /// <param name="provider">提供者</param>
    186.         /// <param name="context">Http上下文，兼容NetCore</param>
    187.         public static void SetPrincipal(this IManageProvider provider, IServiceProvider context = null)
    188.         {
    189.             var ctx = context.GetService<IHttpContextAccessor>()?.HttpContext;
    190.             if (ctx == null) return;
    192.             var user = provider.GetCurrent(context);
    193.             if (user == null) return;
    195.             if (user is not IIdentity id || ctx.User?.Identity == id) return;
    197.             // 角色列表
    198.             var roles = new List<String>();
    199.             if (user is IUser user2) roles.AddRange(user2.Roles.Select(e => e + ""));
    201.             var up = new GenericPrincipal(id, roles.ToArray());
    202.             ctx.User = up;
    203.             Thread.CurrentPrincipal = up;
    204.         }
    206.         /// <summary>尝试登录。如果Session未登录则借助Cookie</summary>
    207.         /// <param name="provider">提供者</param>
    208.         /// <param name="context">Http上下文，兼容NetCore</param>
    209.         public static IManageUser TryLogin(this IManageProvider provider, HttpContext context)
    210.         {
    211.             var serviceProvider = context?.RequestServices;
    213.             // 判断当前登录用户
    214.             var user = provider.GetCurrent(serviceProvider);
    215.             if (user == null)
    216.             {
    217.                 // 尝试从Cookie登录
    218.                 user = provider.LoadCookie(true, context);
    219.                 if (user != null) provider.SetCurrent(user, serviceProvider);
    220.             }
    222.             // 设置前端当前用户
    223.             if (user != null) provider.SetPrincipal(serviceProvider);
    225.             return user;
    226.         }
    228.         /// <summary>生成令牌</summary>
    229.         /// <returns></returns>
    230.         public static JwtBuilder GetJwt()
    231.         {
    232.             var set = Setting.Current;
    234.             // 生成令牌
    235.             var ss = set.JwtSecret.Split(':');
    236.             var jwt = new JwtBuilder
    237.             {
    238.                 Algorithm = ss[0],
    239.                 Secret = ss[1],
    240.             };
    242.             return jwt;
    243.         }
    245.         #region Cookie
    246.         /// <summary>从Cookie加载用户信息</summary>
    247.         /// <param name="provider">提供者</param>
    248.         /// <param name="autologin">是否自动登录</param>
    249.         /// <param name="context">Http上下文，兼容NetCore</param>
    250.         /// <returns></returns>
    251.         public static IManageUser LoadCookie(this IManageProvider provider, Boolean autologin, HttpContext context)
    252.         {
    253.             var key = "token";
    254.             var req = context?.Request;
    255.             var token = req?.Cookies[key];
    257.             // 尝试从url中获取token
    258.             if (token.IsNullOrEmpty() || token.Split(".").Length != 3) token = req?.Query["token"];
    259.             if (token.IsNullOrEmpty() || token.Split(".").Length != 3) token = req?.Query["jwtToken"];
    261.             // 尝试从头部获取token
    262.             if (token.IsNullOrEmpty() || token.Split(".").Length != 3) token = req?.Headers[HeaderNames.Authorization];
    264.             if (token.IsNullOrEmpty() || token.Split(".").Length != 3) return null;
    266.             token = token.Replace("Bearer ", "", StringComparison.OrdinalIgnoreCase);
    268.             var jwt = GetJwt();
    269.             if (!jwt.TryDecode(token, out var msg))
    270.             {
    271.                 XTrace.WriteLine("令牌无效：{0}, token={1}", msg, token);
    273.                 return null;
    274.             }
    276.             var user = jwt.Subject;
    277.             if (user.IsNullOrEmpty()) return null;
    279.             // 判断有效期
    280.             if (jwt.Expire < DateTime.Now)
    281.             {
    282.                 XTrace.WriteLine("令牌过期：{0} {1}", jwt.Expire, token);
    284.                 return null;
    285.             }
    287.             var u = provider.FindByName(user);
    288.             if (u == null || !u.Enable) return null;
    290.             // 保存登录信息。如果是json请求，不用记录自动登录
    291.             if (autologin && u is IAuthUser mu && !req.IsAjaxRequest())
    292.             {
    293.                 mu.SaveLogin(null);
    295.                 LogProvider.Provider.WriteLog("用户", "自动登录", true, $"{user} Time={jwt.IssuedAt} Expire={jwt.Expire} Token={token}", u.ID, u + "", ip: context.GetUserHost());
    296.             }
    298.             return u;
    299.         }
    301.         /// <summary>保存用户信息到Cookie</summary>
    302.         /// <param name="provider">提供者</param>
    303.         /// <param name="user">用户</param>
    304.         /// <param name="expire">过期时间</param>
    305.         /// <param name="context">Http上下文，兼容NetCore</param>
    306.         public static void SaveCookie(this IManageProvider provider, IManageUser user, TimeSpan expire, HttpContext context)
    307.         {
    308.             var res = context?.Response;
    309.             if (res == null) return;
    311.             var option = new CookieOptions();
    313.             var token = "";
    314.             if (user != null)
    315.             {
    316.                 // 令牌有效期，默认2小时
    317.                 var exp = DateTime.Now.Add(expire.TotalSeconds > 0 ? expire : TimeSpan.FromHours(2));
    318.                 var jwt = GetJwt();
    319.                 jwt.Subject = user.Name;
    320.                 jwt.Expire = exp;
    322.                 token = jwt.Encode(null);
    323.                 if (expire.TotalSeconds > 0) option.Expires = DateTimeOffset.Now.Add(expire);
    324.             }
    325.             else
    326.             {
    327.                 option.Expires = DateTimeOffset.MinValue;
    328.             }
    329.             res.Cookies.Append("token", token, option);
    331.             context.Items["jwtToken"] = token;
    332.         }
    333.         #endregion
    335.         /// <summary>
    336.         /// 添加管理提供者
    337.         /// </summary>
    338.         /// <param name="service"></param>
    339.         public static void AddManageProvider(this IServiceCollection service)
    340.         {
    341.             service.TryAddSingleton<IHttpContextAccessor, HttpContextAccessor>();
    342.             service.TryAddSingleton<IManageProvider, ManageProvider2>();
    343.         }
    345.         /// <summary>
    346.         /// 使用管理提供者
    347.         /// </summary>
    348.         /// <param name="app"></param>
    349.         public static void UseManagerProvider(this IApplicationBuilder app)
    350.         {
    351.             XTrace.WriteLine("初始化ManageProvider");
    353.             ManageProvider.Provider = app.ApplicationServices.GetService<IManageProvider>();
    354.             ManageProvider2.Context = app.ApplicationServices.GetService<IHttpContextAccessor>();
    356.             // 初始化数据库
    357.             _ = Role.Meta.Count;
    358.         }
    359.     }
    360. }