MVC Filter自定义验证（拦截）

 namespace QS.Web.Extensions
 {
     /// <summary>
     ///     验证session、权限    状态
     /// </summary>
     [AttributeUsage(AttributeTargets.Class | AttributeTargets.Method, AllowMultiple = false)]
     public class RequestFilterAttribute : ActionFilterAttribute
     {
         public override void OnActionExecuting(ActionExecutingContext filterContext)
         {
             FilterAttributesInfo attributes = filterContext.GetExecutingContext();

             switch (attributes.Action.ToUpper())
             {
                 case "LOGIN":
                 case "LOGINVALID":
                 case "LOGOUT": break;
                 default:
                     //session验证
                     var sessionUserInfo = filterContext.HttpContext.Session[SystemConsts.AdminSession.ToString()];
                     if (null == sessionUserInfo)
                     {
                         var url = new UrlHelper(filterContext.RequestContext);
                         var routeUrl = url.Action("Login", "Account", new { ErrorMsg = "用户信息丢失！" });
                         filterContext.Result = new RedirectResult(routeUrl);
                     }
                     else
                     {
                         //参数非空验证
                         foreach (var param in attributes.ParameterArray)
                         {
                             param.ParameterName.CheckNotNullOrEmpty(param.ParameterName);
                         }
                         //权限验证
                         var permissions = filterContext
                                             .HttpContext
                                             .Session[SystemConsts.AdminRolePermissions.ToString()]
                                             as List<SystemUserPermissionDto>;
                         if (!permissions.Any(x =>
                                 x.ControllerName.ToLower() == attributes.Controller.ToLower() &&
                                 x.ActionName.ToLower() == attributes.Action.ToLower()))
                         {
                             filterContext.Result = new ContentResult() { Content = "invalid operation :no permission" };
                         }
                     }
                     break;
             }
             base.OnActionExecuting(filterContext);
         }
     }
 }

其中涉及到获取  filterContext的方法类如下：

 // -----------------------------------------------------------------------
 //  <copyright file="FilterAttributesInfo.cs" company="技术支持——谭明超">
 //      Copyright (c) 2016 QS.Web.Extensions. All rights reserved.
 //  </copyright>
 //  <last-editor>谭明超</last-editor>
 //  <last-date>2016/8/2 18:37:01</last-date>
 // -----------------------------------------------------------------------

 using System;
 using System.Collections.Generic;
 using System.Linq;
 using System.Web;
 using System.Web.Mvc;

 namespace QS.Web.Extensions
 {
     /// <summary>
     ///     互殴去
     /// </summary>
     public class FilterAttributesInfo
     {
         /// <summary>
         ///     控制器名称
         /// </summary>
         public string Controller { get; set; }
         /// <summary>
         ///     方法名称
         /// </summary>
         public string Action { get; set; }
         /// <summary>
         ///     route参数
         /// </summary>
         public ParameterDescriptor[] ParameterArray { get; set; }

     }

     /// <summary>
     ///     获取 filter filterContext的相关属性
     /// </summary>
     public static class FilterAttributeExtension
     {
         /// <summary>
         ///     获取当前filterContext的相关属性
         /// </summary>
         /// <param name="filterContext"></param>
         /// <returns></returns>
         public static FilterAttributesInfo GetExecutingContext(this ActionExecutingContext filterContext)
         {
             return new FilterAttributesInfo
             {
                 Controller = filterContext.ActionDescriptor.ControllerDescriptor.ControllerName,
                 Action = filterContext.ActionDescriptor.ActionName,
                 ParameterArray = filterContext.ActionDescriptor.GetParameters()
             };
         }
     }

 }