如何在MVC 4中创建自定义WebSecurity.Login和WebSecurity.CreateUserAndAccount方法？

Question

当我们选择时New Project --> MVC 4 --> Internet Application,它会自动为我们生成AccountController.在这个控制器中,我只关心2个动作,Login并且Register.

在MVC 3中,它使用了Membership的静态方法,ValidateUser在Login行动中和CreateUser在Register.所以,如果我想将它与我自己的数据库集成,我只需要CustomMembershipProvider通过扩展MembershipProvider和覆盖这两种方法来创建.

但在MVC 4中,它使用WebSecurity.Login和WebSecurity.CreateUserAndAccount.我的问题是:

1. 我怎样才能像在MVC 3中那样使用我自己的数据库？
2. 有什么不同？为什么不继续使用静态成员资格方法？为什么要改变WebSecurity？

非常感谢你的帮助.

Answer 1

您需要实现自己的成员资格和角色提供程序.

定制提供商:

namespace MyApp.Helpers
{
    public class CustomProviderProvider : SimpleMembershipProvider
    {
        public override MembershipUser GetUser(string username, bool userIsOnline)
        {
            return base.GetUser(username, userIsOnline);
        }

        public override bool ValidateUser(string username, string password)
        {
            return true; // base.ValidateUser(username, password);
        }
    }
}

您只需要覆盖想要"拦截"的方法(即ValidateUser).您还需要在web.config文件中注册提供程序:

<system.web>
    <membership defaultProvider="CustomMembershipProvider">
      <providers>
        <clear/>
        <add name="SimpleMembershipProvider" type="WebMatrix.WebData.SimpleMembershipProvider, WebMatrix.WebData" />
        <add name="CustomMembershipProvider" type="MyApp.Helpers.CustomMembershipProvider, MyApp" />
      </providers>
    </membership>
</system.web>

您还应该有一个名为"InitializeSimpleMembershipAttribute"的过滤器

namespace CustomPortal.Filters
{
    [AttributeUsage(AttributeTargets.Class | AttributeTargets.Method, AllowMultiple = false, Inherited = true)]
    public sealed class InitializeSimpleMembershipAttribute : ActionFilterAttribute
    {
        private static SimpleMembershipInitializer _initializer;
        private static object _initializerLock = new object();
        private static bool _isInitialized;

        public override void OnActionExecuting(ActionExecutingContext filterContext)
        {
            // Ensure ASP.NET Simple Membership is initialized only once per app start
            LazyInitializer.EnsureInitialized(ref _initializer, ref _isInitialized, ref _initializerLock);
        }

        private class SimpleMembershipInitializer
        {
            public SimpleMembershipInitializer()
            {
                Database.SetInitializer<CustomPortalContext>(null);

                try
                {
                    using (var context = new CustomPortalContext())
                    {
                        if (!context.Database.Exists())
                        {
                            // Create the SimpleMembership database without Entity Framework migration schema
                            ((IObjectContextAdapter)context).ObjectContext.CreateDatabase();
                        }
                    }
//Here is where you give it your connection string name
                    WebSecurity.InitializeDatabaseConnection("CustomPortal", "UserProfile", "UserId", "EmailAddress", autoCreateTables: true);
                }
                catch (Exception ex)
                {
                    throw new InvalidOperationException("The ASP.NET Simple Membership database could not be initialized. For more information, please see http://go.microsoft.com/fwlink/?LinkId=256588", ex);
                }
            }
        }
    }
}

我希望这有帮助...