在ASP.NET MVC5中建置以角色为基础的授权机制

在前一篇贴文中，已探索过如何在MVC5中自定ASP.NET Identity，接下来要来试试在MVC5中如何运用 ASP.NET Identity来设定一个以 "角色"为基础的授权机制。为了方便起见，简化了这个认证机制的内容，同时假设这是一个公司内部使用的应用程序，所以拿掉了"注册"的功能，所有的使用账 号管理都必须透过某一管理权限(Admin)的使用者来进行，也就是说只有具备有 Admin 角色的使用者可以执行”账户管理"的功能。

贴文内容:

建立MVC5新项目

修改相关 Mdels

扩展Identity Management Mdel 

 加入新字段

 建立Helper Class

扩展Accunt Management ViewMdels (AccuntViewMdels.cs)

 在RegisterViewMdel加入新字段 及 GetUser methd

 新增 EditUserViewMdel、SelectUserRlesViewMdel、SelectRleEditrViewMdel

修改相关 Cntrllers

修改AccuntCntrller 中 Register Methd 加入 Authrize attribute

加入 Index Methd (ActinResult)

加入 Edit Methd (ActinResult)

加入 Delete Methd (ActinResult)

加入 UserRles Methd (ActinResult)

修改相关 Views

修改Register.cshtml View 

新增Edit、Delete、Index 等方法的Views

新增UserRles.cshtml View 并 新增程序代码

新增 SelectRleEditrViewMdel.cshtml 在 Shared/EditrTemplates目录下

在主页面上新增”账号管理" 功能按钮

移除主页面上的注册功能

启动 Migratin功能

在Seed()方法中加入建立测试数据的程序代码

更新数据库

执行结果

 

建立MVC5新项目

 

 

修改相关 Models

 

1. 扩展Identity Management Model (IdentityModels.cs)

 

加入新字段：为使用者数据多加三个属性字段，分别是FirstName、LastName、Email。

 

 

建立Helper Class：利用Asp.Net Identity API建立一个 Identity Management Helper class: IdentityManager class，包含有建立角色、建立使用者...等功能。
 

 

IdentityModels.cs 完整程序

01.using Microsoft.AspNet.Identity;

02.using Microsoft.AspNet.Identity.EntityFramework;

03.using System.Collections.Generic;

04.using System.ComponentModel.DataAnnotations;

05. 

06.namespace RoleBaseProject.Models

07.{

08.// You can add profile data for the user by adding more properties to your ApplicationUser class, please visit http://go.microsoft.com/fwlink/?LinkID=317594 to learn more.

09.public class ApplicationUser : IdentityUser

10.{

11.[Required]

12.public string FirstName { get; set; }

13. 

14.[Required]

15.public string LastName { get; set; }

16.[Required]

17.public string Email { get; set; }

18.}

19. 

20.public class ApplicationDbContext : IdentityDbContext<ApplicationUser>

21.{

22.public ApplicationDbContext()

23.: base("DefaultConnection")

24.{

25.}

26.}

27. 

28.public class IdentityManager

29.{

30.// 判断角色是否已在存在

31.public bool RoleExists(string name)

32.{

33.var rm = new RoleManager<IdentityRole>(

34.new RoleStore<IdentityRole>(new ApplicationDbContext()));

35.return rm.RoleExists(name);

36.}

37.// 新增角色

38.public bool CreateRole(string name)

39.{

40.var rm = new RoleManager<IdentityRole>(

41.new RoleStore<IdentityRole>(new ApplicationDbContext()));

42.var idResult = rm.Create(new IdentityRole(name));

43.return idResult.Succeeded;

44.}

45.// 新增角色

46.public bool CreateUser(ApplicationUser user, string pass<a href="http://www.it165.net/edu/ebg/" target="_blank" class="keylink">word</a>)

47.{

48.var um = new UserManager<ApplicationUser>(

49.new UserStore<ApplicationUser>(new ApplicationDbContext()));

50.var idResult = um.Create(user, pass<a href="http://www.it165.net/edu/ebg/" target="_blank" class="keylink">word</a>);

51.return idResult.Succeeded;

52.}

53.// 将使用者加入角色中

54.public bool AddUserToRole(string userId, string roleName)

55.{

56.var um = new UserManager<ApplicationUser>(

57.new UserStore<ApplicationUser>(new ApplicationDbContext()));

58.var idResult = um.AddToRole(userId, roleName);

59.return idResult.Succeeded;

60.}

61.// 清除使用者的角色设定

62.public void ClearUserRoles(string userId)

63.{

64.var um = new UserManager<ApplicationUser>(

65.new UserStore<ApplicationUser>(new ApplicationDbContext()));

66.var user = um.FindById(userId);

67.var currentRoles = new List<IdentityUserRole>();

68.currentRoles.AddRange(user.Roles);

69.foreach(var role in currentRoles)

70.{

71.um.RemoveFromRole(userId, role.Role.Name);

72.}

73.}

74.}

75.}

2. 扩展Account Management ViewModels (AccountViewModels.cs)

 

在RegisterViewModel加入新字段 及 GetUser method

 

 

 

针对要新增的"账号管理"功能新增三个ViewModel，分别是: EditUserViewModel、SelectUserRolesViewModel、SelectRoleEditorViewModel

 

AccountViewModels.cs 完整程序

001.using Microsoft.AspNet.Identity.EntityFramework;

002.using System.Collections.Generic;

003.using System.ComponentModel.DataAnnotations;

004. 

005.namespace RoleBaseProject.Models

006.{

007.public class ExternalLoginConfirmationViewModel

008.{

009.[Required]

010.[Display(Name = "使用者名称")]

011.public string UserName { get; set; }

012.}

013. 

014.public class ManageUserViewModel

015.{

016.[Required]

017.[DataType(DataType.Password)]

018.[Display(Name = "目前密码")]

019.public string OldPassword { get; set; }

020. 

021.[Required]

022.[StringLength(100, ErrorMessage = "{0} 的长度至少必须为 {2} 个字符。", MinimumLength = 6)]

023.[DataType(DataType.Password)]

024.[Display(Name = "新密码")]

025.public string NewPassword { get; set; }

026. 

027.[DataType(DataType.Password)]

028.[Display(Name = "确认新密码")]

029.[Compare("NewPassword", ErrorMessage = "新密码与确认密码不相符。")]

030.public string ConfirmPassword { get; set; }

031.}

032. 

033.public class LoginViewModel

034.{

035.[Required]

036.[Display(Name = "使用者名称")]

037.public string UserName { get; set; }

038. 

039.[Required]

040.[DataType(DataType.Password)]

041.[Display(Name = "密码")]

042.public string Password { get; set; }

043. 

044.[Display(Name = "记住我?")]

045.public bool RememberMe { get; set; }

046.}

047. 

048.public class RegisterViewModel

049.{

050.[Required]

051.[Display(Name = "使用者名称")]

052.public string UserName { get; set; }

053. 

054.[Required]

055.[StringLength(100, ErrorMessage = "{0} 的长度至少必须为 {2} 个字符。", MinimumLength = 6)]

056.[DataType(DataType.Password)]

057.[Display(Name = "密码")]

058.public string Password { get; set; }

059. 

060.[DataType(DataType.Password)]

061.[Display(Name = "确认密码")]

062.[Compare("Password", ErrorMessage = "密码和确认密码不相符。")]

063.public string ConfirmPassword { get; set; }

064. 

065.[Required]

066.[Display(Name = "First Name")]

067.public string FirstName { get; set; }

068. 

069.[Required]

070.[Display(Name = "Last Name")]

071.public string LastName { get; set; }

072. 

073.[Required]

074.[Display(Name = "电子邮件信箱")]

075.public string Email { get; set; }

076. 

077.public ApplicationUser GetUser()

078.{

079.var user = new ApplicationUser()

080.{

081.UserName = this.UserName,

082.FirstName = this.FirstName,

083.LastName = this.LastName,

084.Email = this.Email,

085.};

086.return user;

087.}

088.}

089. 

090.public class EditUserViewModel

091.{

092.public EditUserViewModel() { }

093. 

094.// Allow Initialization with an instance of ApplicationUser:

095.public EditUserViewModel(ApplicationUser user)

096.{

097.this.UserName = user.UserName;

098.this.FirstName = user.FirstName;

099.this.LastName = user.LastName;

100.this.Email = user.Email;

101.}

102. 

103.[Required]

104.[Display(Name = "使用者账号")]

105.public string UserName { get; set; }

106. 

107.[Required]

108.[Display(Name = "名")]

109.public string FirstName { get; set; }

110. 

111.[Required]

112.[Display(Name = "姓")]

113.public string LastName { get; set; }

114. 

115.[Required]

116.[Display(Name = "电子邮件信箱")]

117.public string Email { get; set; }

118.}

119. 

120.public class SelectUserRolesViewModel

121.{

122.public SelectUserRolesViewModel()

123.{

124.this.Roles = new List<SelectRoleEditorViewModel>();

125.}

126. 

127.// Enable initialization with an instance of ApplicationUser:

128.public SelectUserRolesViewModel(ApplicationUser user)

129.: this()

130.{

131.this.UserName = user.UserName;

132.this.FirstName = user.FirstName;

133.this.LastName = user.LastName;

134. 

135.var Db = new ApplicationDbContext();

136. 

137.// Add all available roles to the list of EditorViewModels:

138.var allRoles = Db.Roles;

139.foreach (var role in allRoles)

140.{

141.// An EditorViewModel will be used by Editor Template:

142.var rvm = new SelectRoleEditorViewModel(role);

143.this.Roles.Add(rvm);

144.}

145. 

146.// Set the Selected property to true for those roles for

147.// which the current user is a member:

148.foreach (var userRole in user.Roles)

149.{

150.var checkUserRole =

151.this.Roles.Find(r => r.RoleName == userRole.Role.Name);

152.checkUserRole.Selected = true;

153.}

154.}

155. 

156.public string UserName { get; set; }

157.public string FirstName { get; set; }

158.public string LastName { get; set; }

159.public List<SelectRoleEditorViewModel> Roles { get; set; }

160.}

161. 

162.// Used to display a single role with a checkbox, within a list structure:

163.public class SelectRoleEditorViewModel

164.{

165.public SelectRoleEditorViewModel() { }

166.public SelectRoleEditorViewModel(IdentityRole role)

167.{

168.this.RoleName = role.Name;

169.}

170. 

171.public bool Selected { get; set; }

172. 

173.[Required]

174.public string RoleName { get; set; }

175.}

176. 

177.}

修改相关 Controllers

 

修改AccountController 中 Register Method 加入 Authorize attribute

 

 

 

必须具有Admin 角色者才能执行。

 

加入 Index Method (ActionResult)

01.[Authorize(Roles = "Admin")]

02.public ActionResult Index()

03.{

04.var Db = new ApplicationDbContext();

05.var users = Db.Users;

06.var model = new List<EditUserViewModel>();

07.foreach(var user in users)

08.{

09.var u = new EditUserViewModel(user);

10.model.Add(u);

11.}

12.return View(model);

13.}

加入 Edit Method (ActionResult)

01.//

02.// GEG: /Account/Edit

03.[Authorize(Roles = "Admin")]

04.public ActionResult Edit(string id , ManageMessageId? Message = null)

05.{

06.var Db = new ApplicationDbContext();

07.var user = Db.Users.First(u => u.UserName == id);

08.var model = new EditUserViewModel(user);

09.ViewBag.MessageId = Message;

10.return View(model);

11.}

12.//

13.// POST: /Account/Edit

14.[HttpPost]

15.[Authorize(Roles = "Admin")]

16.[ValidateAntiForgeryToken]

17.public async Task<ActionResult> Edit(EditUserViewModel model)

18.{

19.if (ModelState.IsValid)

20.{

21.var Db = new ApplicationDbContext();

22.var user = Db.Users.First(u => u.UserName == model.UserName);

23.user.FirstName = model.FirstName;

24.user.LastName = model.LastName;

25.user.Email = model.Email;

26.Db.Entry(user).State = System.Data.Entity.EntityState.Modified;

27.await Db.SaveChangesAsync();

28.return RedirectToAction("Index");

29.}

30.return View(model);

31.}

加入 Delete Method (ActionResult)

01.//

02.// GEG: /Account/Delete

03.[Authorize(Roles="Admin")]

04.public ActionResult Delete(string id = null)

05.{

06.var Db = new ApplicationDbContext();

07.var user = Db.Users.First(u => u.UserName == id);

08.var model = new EditUserViewModel(user);

09.return View(model);

10.}

11.//

12.// POST: /Account/Delete

13.[HttpPost, ActionName("Delete")]

14.[Authorize(Roles = "Admin")]

15.[ValidateAntiForgeryToken]

16.public ActionResult DeleteConfirmed(string id)

17.{

18.var Db = new ApplicationDbContext();

19.var user = Db.Users.First(u => u.UserName == id);

20.Db.Users.Remove(user);

21.Db.SaveChanges();

22.return RedirectToAction("Index");

23.}

加入 UserRoles Method (ActionResult)

01.//

02.// GEG: /Account/UserRoles

03.[Authorize(Roles = "Admin")]

04.public ActionResult UserRoles(string id)

05.{

06.var Db = new ApplicationDbContext();

07.var user = Db.Users.First(u => u.UserName == id);

08.var model = new SelectUserRolesViewModel(user);

09.return View(model);

10.}

11. 

12.//

13.// POST: /Account/UserRoles

14.[HttpPost]

15.[Authorize(Roles = "Admin")]

16.[ValidateAntiForgeryToken]

17.public ActionResult UserRoles(SelectUserRolesViewModel model)

18.{

19.if (ModelState.IsValid)

20.{

21.var idManager = new IdentityManager();

22.var Db = new ApplicationDbContext();

23.var user = Db.Users.First(u => u.UserName == model.UserName);

24.idManager.ClearUserRoles(user.Id);

25.foreach (var role in model.Roles)

26.{

27.if (role.Selected)

28.{

29.idManager.AddUserToRole(user.Id, role.RoleName);

30.}

31.}

32.return RedirectToAction("index");

33.}

34.return View();

35.}

AccountController.cs 完整程序

001.using System;

002.using System.Collections.Generic;

003.using System.Linq;

004.using System.Security.Claims;

005.using System.Threading.Tasks;

006.using System.Web;

007.using System.Web.Mvc;

008.using Microsoft.AspNet.Identity;

009.using Microsoft.AspNet.Identity.EntityFramework;

010.using Microsoft.Owin.Security;

011.using RoleBaseProject.Models;

012. 

013.namespace RoleBaseProject.Controllers

014.{

015.[Authorize]

016.public class AccountController : Controller

017.{

018.public AccountController()

019.: this(new UserManager<ApplicationUser>(new UserStore<ApplicationUser>(new ApplicationDbContext())))

020.{

021.}

022. 

023.public AccountController(UserManager<ApplicationUser> userManager)

024.{

025.UserManager = userManager;

026.}

027. 

028.public UserManager<ApplicationUser> UserManager { get; private set; }

029. 

030.//

031.// GET: /Account/Login

032.[AllowAnonymous]

033.public ActionResult Login(string returnUrl)

034.{

035.ViewBag.ReturnUrl = returnUrl;

036.return View();

037.}

038. 

039.//

040.// POST: /Account/Login

041.[HttpPost]

042.[AllowAnonymous]

043.[ValidateAntiForgeryToken]

044.public async Task<ActionResult> Login(LoginViewModel model, string returnUrl)

045.{

046.if (ModelState.IsValid)

047.{

048.var user = await UserManager.FindAsync(model.UserName, model.Password);

049.if (user != null)

050.{

051.await SignInAsync(user, model.RememberMe);

052.return RedirectToLocal(returnUrl);

053.}

054.else

055.{

056.ModelState.AddModelError("", "Invalid username or password.");

057.}

058.}

059. 

060.// 如果执行到这里，发生某项失败，则重新显示窗体

061.return View(model);

062.}

063. 

064.//

065.// GET: /Account/Register

066.[Authorize(Roles="Admin")]

067.public ActionResult Register()

068.{

069.return View();

070.}

071. 

072.//

073.// POST: /Account/Register

074.[HttpPost]

075.[Authorize(Roles = "Admin")]

076.[ValidateAntiForgeryToken]

077.public async Task<ActionResult> Register(RegisterViewModel model)

078.{

079.if (ModelState.IsValid)

080.{

081.var user = new ApplicationUser() {

082.UserName = model.UserName,

083.FirstName = model.FirstName,

084.LastName = model.LastName,

085.Email = model.Email,

086.};

087.var result = await UserManager.CreateAsync(user, model.Password);

088.if (result.Succeeded)

089.{

090.await SignInAsync(user, isPersistent: false);

091.return RedirectToAction("Index", "Home");

092.}

093.else

094.{

095.AddErrors(result);

096.}

097.}

098. 

099.// 如果执行到这里，发生某项失败，则重新显示窗体

100.return View(model);

101.}

102. 

103.//

104.// GEG: /Account/Index

105.[Authorize(Roles = "Admin")]

106.public ActionResult Index()

107.{

108.var Db = new ApplicationDbContext();

109.var users = Db.Users;

110.var model = new List<EditUserViewModel>();

111.foreach(var user in users)

112.{

113.var u = new EditUserViewModel(user);

114.model.Add(u);

115.}

116.return View(model);

117.}

118. 

119.//

120.// GEG: /Account/Edit

121.[Authorize(Roles = "Admin")]

122.public ActionResult Edit(string id , ManageMessageId? Message = null)

123.{

124.var Db = new ApplicationDbContext();

125.var user = Db.Users.First(u => u.UserName == id);

126.var model = new EditUserViewModel(user);

127.ViewBag.MessageId = Message;

128.return View(model);

129.}

130.//

131.// POST: /Account/Edit

132.[HttpPost]

133.[Authorize(Roles = "Admin")]

134.[ValidateAntiForgeryToken]

135.public async Task<ActionResult> Edit(EditUserViewModel model)

136.{

137.if (ModelState.IsValid)

138.{

139.var Db = new ApplicationDbContext();

140.var user = Db.Users.First(u => u.UserName == model.UserName);

141.user.FirstName = model.FirstName;

142.user.LastName = model.LastName;

143.user.Email = model.Email;

144.Db.Entry(user).State = System.Data.Entity.EntityState.Modified;

145.await Db.SaveChangesAsync();

146.return RedirectToAction("Index");

147.}

148.return View(model);

149.}

150. 

151.//

152.// GEG: /Account/Delete

153.[Authorize(Roles="Admin")]

154.public ActionResult Delete(string id = null)

155.{

156.var Db = new ApplicationDbContext();

157.var user = Db.Users.First(u => u.UserName == id);

158.var model = new EditUserViewModel(user);

159.return View(model);

160.}

161.//

162.// POST: /Account/Delete

163.[HttpPost, ActionName("Delete")]

164.[Authorize(Roles = "Admin")]

165.[ValidateAntiForgeryToken]

166.public ActionResult DeleteConfirmed(string id)

167.{

168.var Db = new ApplicationDbContext();

169.var user = Db.Users.First(u => u.UserName == id);

170.Db.Users.Remove(user);

171.Db.SaveChanges();

172.return RedirectToAction("Index");

173.}

174.//

175.// GEG: /Account/UserRoles

176.[Authorize(Roles = "Admin")]

177.public ActionResult UserRoles(string id)

178.{

179.var Db = new ApplicationDbContext();

180.var user = Db.Users.First(u => u.UserName == id);

181.var model = new SelectUserRolesViewModel(user);

182.return View(model);

183.}

184. 

185.//

186.// POST: /Account/UserRoles

187.[HttpPost]

188.[Authorize(Roles = "Admin")]

189.[ValidateAntiForgeryToken]

190.public ActionResult UserRoles(SelectUserRolesViewModel model)

191.{

192.if (ModelState.IsValid)

193.{

194.var idManager = new IdentityManager();

195.var Db = new ApplicationDbContext();

196.var user = Db.Users.First(u => u.UserName == model.UserName);

197.idManager.ClearUserRoles(user.Id);

198.foreach (var role in model.Roles)

199.{

200.if (role.Selected)

201.{

202.idManager.AddUserToRole(user.Id, role.RoleName);

203.}

204.}

205.return RedirectToAction("index");

206.}

207.return View();

208.}

209. 

210.//

211.// POST: /Account/Disassociate

212.[HttpPost]

213.[ValidateAntiForgeryToken]

214.public async Task<ActionResult> Disassociate(string loginProvider, string providerKey)

215.{

216.ManageMessageId? message = null;

217.IdentityResult result = await UserManager.RemoveLoginAsync(User.Identity.GetUserId(), new UserLoginInfo(loginProvider, providerKey));

218.if (result.Succeeded)

219.{

220.message = ManageMessageId.RemoveLoginSuccess;

221.}

222.else

223.{

224.message = ManageMessageId.Error;

225.}

226.return RedirectToAction("Manage", new { Message = message });

227.}

228. 

229.//

230.// GET: /Account/Manage

231.public ActionResult Manage(ManageMessageId? message)

232.{

233.ViewBag.StatusMessage =

234.message == ManageMessageId.ChangePasswordSuccess ? "您的密码已变更。"

235.: message == ManageMessageId.SetPasswordSuccess ? "已设定您的密码。"

236.: message == ManageMessageId.RemoveLoginSuccess ? "已移除外部登入。"

237.: message == ManageMessageId.Error ? "发生错误。"

238.: "";

239.ViewBag.HasLocalPassword = HasPassword();

240.ViewBag.ReturnUrl = Url.Action("Manage");

241.return View();

242.}

243. 

244.//

245.// POST: /Account/Manage

246.[HttpPost]

247.[ValidateAntiForgeryToken]

248.public async Task<ActionResult> Manage(ManageUserViewModel model)

249.{

250.bool hasPassword = HasPassword();

251.ViewBag.HasLocalPassword = hasPassword;

252.ViewBag.ReturnUrl = Url.Action("Manage");

253.if (hasPassword)

254.{

255.if (ModelState.IsValid)

256.{

257.IdentityResult result = await UserManager.ChangePasswordAsync(User.Identity.GetUserId(), model.OldPassword, model.NewPassword);

258.if (result.Succeeded)

259.{

260.return RedirectToAction("Manage", new { Message = ManageMessageId.ChangePasswordSuccess });

261.}

262.else

263.{

264.AddErrors(result);

265.}

266.}

267.}

268.else

269.{

270.// User does not have a password so remove any validation errors caused by a missing OldPassword field

271.ModelState state = ModelState["OldPassword"];

272.if (state != null)

273.{

274.state.Errors.Clear();

275.}

276. 

277.if (ModelState.IsValid)

278.{

279.IdentityResult result = await UserManager.AddPasswordAsync(User.Identity.GetUserId(), model.NewPassword);

280.if (result.Succeeded)

281.{

282.return RedirectToAction("Manage", new { Message = ManageMessageId.SetPasswordSuccess });

283.}

284.else

285.{

286.AddErrors(result);

287.}

288.}

289.}

290. 

291.// 如果执行到这里，发生某项失败，则重新显示窗体

292.return View(model);

293.}

294. 

295.//

296.// POST: /Account/ExternalLogin

297.[HttpPost]

298.[AllowAnonymous]

299.[ValidateAntiForgeryToken]

300.public ActionResult ExternalLogin(string provider, string returnUrl)

301.{

302.// 要求重新导向至外部登入提供者

303.return new ChallengeResult(provider, Url.Action("ExternalLoginCallback", "Account", new { ReturnUrl = returnUrl }));

304.}

305. 

306.//

307.// GET: /Account/ExternalLoginCallback

308.[AllowAnonymous]

309.public async Task<ActionResult> ExternalLoginCallback(string returnUrl)

310.{

311.var loginInfo = await AuthenticationManager.GetExternalLoginInfoAsync();

312.if (loginInfo == null)

313.{

314.return RedirectToAction("Login");

315.}

316. 

317.// Sign in the user with this external login provider if the user already has a login

318.var user = await UserManager.FindAsync(loginInfo.Login);

319.if (user != null)

320.{

321.await SignInAsync(user, isPersistent: false);

322.return RedirectToLocal(returnUrl);

323.}

324.else

325.{

326.// If the user does not have an account, then prompt the user to create an account

327.ViewBag.ReturnUrl = returnUrl;

328.ViewBag.LoginProvider = loginInfo.Login.LoginProvider;

329.return View("ExternalLoginConfirmation", new ExternalLoginConfirmationViewModel { UserName = loginInfo.DefaultUserName });

330.}

331.}

332. 

333.//

334.// POST: /Account/LinkLogin

335.[HttpPost]

336.[ValidateAntiForgeryToken]

337.public ActionResult LinkLogin(string provider)

338.{

339.// Request a redirect to the external login provider to link a login for the current user

340.return new ChallengeResult(provider, Url.Action("LinkLoginCallback", "Account"), User.Identity.GetUserId());

341.}

342. 

343.//

344.// GET: /Account/LinkLoginCallback

345.public async Task<ActionResult> LinkLoginCallback()

346.{

347.var loginInfo = await AuthenticationManager.GetExternalLoginInfoAsync(XsrfKey, User.Identity.GetUserId());

348.if (loginInfo == null)

349.{

350.return RedirectToAction("Manage", new { Message = ManageMessageId.Error });

351.}

352.var result = await UserManager.AddLoginAsync(User.Identity.GetUserId(), loginInfo.Login);

353.if (result.Succeeded)

354.{

355.return RedirectToAction("Manage");

356.}

357.return RedirectToAction("Manage", new { Message = ManageMessageId.Error });

358.}

359. 

360.//

361.// POST: /Account/ExternalLoginConfirmation

362.[HttpPost]

363.[AllowAnonymous]

364.[ValidateAntiForgeryToken]

365.public async Task<ActionResult> ExternalLoginConfirmation(ExternalLoginConfirmationViewModel model, string returnUrl)

366.{

367.if (User.Identity.IsAuthenticated)

368.{

369.return RedirectToAction("Manage");

370.}

371. 

372.if (ModelState.IsValid)

373.{

374.// 从外部登入提供者处取得使用者信息

375.var info = await AuthenticationManager.GetExternalLoginInfoAsync();

376.if (info == null)

377.{

378.return View("ExternalLoginFailure");

379.}

380.var user = new ApplicationUser() { UserName = model.UserName };

381.var result = await UserManager.CreateAsync(user);

382.if (result.Succeeded)

383.{

384.result = await UserManager.AddLoginAsync(user.Id, info.Login);

385.if (result.Succeeded)

386.{

387.await SignInAsync(user, isPersistent: false);

388.return RedirectToLocal(returnUrl);

389.}

390.}

391.AddErrors(result);

392.}

393. 

394.ViewBag.ReturnUrl = returnUrl;

395.return View(model);

396.}

397. 

398.//

399.// POST: /Account/LogOff

400.[HttpPost]

401.[ValidateAntiForgeryToken]

402.public ActionResult LogOff()

403.{

404.AuthenticationManager.SignOut();

405.return RedirectToAction("Index", "Home");

406.}

407. 

408.//

409.// GET: /Account/ExternalLoginFailure

410.[AllowAnonymous]

411.public ActionResult ExternalLoginFailure()

412.{

413.return View();

414.}

415. 

416.[ChildActionOnly]

417.public ActionResult RemoveAccountList()

418.{

419.var linkedAccounts = UserManager.GetLogins(User.Identity.GetUserId());

420.ViewBag.ShowRemoveButton = HasPassword() || linkedAccounts.Count > 1;

421.return (ActionResult)PartialView("_RemoveAccountPartial", linkedAccounts);

422.}

423. 

424.protected override void Dispose(bool disposing)

425.{

426.if (disposing && UserManager != null)

427.{

428.UserManager.Dispose();

429.UserManager = null;

430.}

431.base.Dispose(disposing);

432.}

433. 

434.#region Helper

435.// Used for XSRF protection when adding external logins

436.private const string XsrfKey = "XsrfId";

437. 

438.private IAuthenticationManager AuthenticationManager

439.{

440.get

441.{

442.return HttpContext.GetOwinContext().Authentication;

443.}

444.}

445. 

446.private async Task SignInAsync(ApplicationUser user, bool isPersistent)

447.{

448.AuthenticationManager.SignOut(DefaultAuthenticationTypes.ExternalCookie);

449.var identity = await UserManager.CreateIdentityAsync(user, DefaultAuthenticationTypes.ApplicationCookie);

450.AuthenticationManager.SignIn(new AuthenticationProperties() { IsPersistent = isPersistent }, identity);

451.}

452. 

453.private void AddErrors(IdentityResult result)

454.{

455.foreach (var error in result.Errors)

456.{

457.ModelState.AddModelError("", error);

458.}

459.}

460. 

461.private bool HasPassword()

462.{

463.var user = UserManager.FindById(User.Identity.GetUserId());

464.if (user != null)

465.{

466.return user.PasswordHash != null;

467.}

468.return false;

469.}

470. 

471.public enum ManageMessageId

472.{

473.ChangePasswordSuccess,

474.SetPasswordSuccess,

475.RemoveLoginSuccess,

476.Error

477.}

478. 

479.private ActionResult RedirectToLocal(string returnUrl)

480.{

481.if (Url.IsLocalUrl(returnUrl))

482.{

483.return Redirect(returnUrl);

484.}

485.else

486.{

487.return RedirectToAction("Index", "Home");

488.}

489.}

490. 

491.private class ChallengeResult : HttpUnauthorizedResult

492.{

493.public ChallengeResult(string provider, string redirectUri) : this(provider, redirectUri, null)

494.{

495.}

496. 

497.public ChallengeResult(string provider, string redirectUri, string userId)

498.{

499.LoginProvider = provider;

500.RedirectUri = redirectUri;

501.UserId = userId;

502.}

503. 

504.public string LoginProvider { get; set; }

505.public string RedirectUri { get; set; }

506.public string UserId { get; set; }

507. 

508.public override void ExecuteResult(ControllerContext context)

509.{

510.var properties = new AuthenticationProperties() { RedirectUri = RedirectUri };

511.if (UserId != null)

512.{

513.properties.Dictionary[XsrfKey] = UserId;

514.}

515.context.HttpContext.GetOwinContext().Authentication.Challenge(properties, LoginProvider);

516.}

517.}

518.#endregion

519.}

520.}

修改相关 Views

 

修改Register.cshtml View 

01.@model RoleBaseProject.Models.RegisterViewModel

02.@{

03.ViewBag.Title = "注册";

04.}

05. 

06.<h2>@ViewBag.Title.</h2>

07. 

08.@using (Html.BeginForm("Register", "Account", FormMethod.Post, new { @class = "form-horizontal", role = "form" }))

09.{

10.@Html.AntiForgeryToken()

11.<h4>建立新的账户。</h4>

12.<hr />

13.@Html.ValidationSummary()

14.<div class="form-group">

15.@Html.LabelFor(m => m.UserName, new { @class = "col-md-2 control-label" })

16.<div class="col-md-10">

17.@Html.TextBoxFor(m => m.UserName, new { @class = "form-control" })

18.</div>

19.</div>

20.<div class="form-group">

21.@Html.LabelFor(m => m.Password, new { @class = "col-md-2 control-label" })

22.<div class="col-md-10">

23.@Html.PasswordFor(m => m.Password, new { @class = "form-control" })

24.</div>

25.</div>

26.<div class="form-group">

27.@Html.LabelFor(m => m.ConfirmPassword, new { @class = "col-md-2 control-label" })

28.<div class="col-md-10">

29.@Html.PasswordFor(m => m.ConfirmPassword, new { @class = "form-control" })

30.</div>

31.</div>

32.<div class="form-group">

33.@Html.LabelFor(m => m.FirstName, new { @class = "col-md-2 control-label" })

34.<div class="col-md-10">

35.@Html.TextBoxFor(m => m.FirstName, new { @class = "form-control" })

36.</div>

37.</div>

38.<div class="form-group">

39.@Html.LabelFor(m => m.LastName, new { @class = "col-md-2 control-label" })

40.<div class="col-md-10">

41.@Html.TextBoxFor(m => m.LastName, new { @class = "form-control" })

42.</div>

43.</div>

44.<div class="form-group">

45.@Html.LabelFor(m => m.Email, new { @class = "col-md-2 control-label" })

46.<div class="col-md-10">

47.@Html.TextBoxFor(m => m.Email, new { @class = "form-control" })

48.</div>

49.</div>

50.<div class="form-group">

51.<div class="col-md-offset-2 col-md-10">

52.<input type="submit" class="btn btn-default" value="注册" />

53.</div>

54.</div>

55.}

56. 

57.@section Scripts {

58.@Scripts.Render("~/bundles/jqueryval")

59.}

 

新增Edit、Delete、Index 等方法的Views

 

新增Edit Views

 

 

用以下内容取代原程序

01.@model RoleBaseProject.Models.EditUserViewModel

02. 

03.@{

04.ViewBag.Title = "数据者数据编辑";

05.}

06. 

07.<h2>数据者数据编辑</h2>

08. 

09.@using (Html.BeginForm())

10.{

11.@Html.AntiForgeryToken()

12.<div class="form-horizontal">

13.<h4>修改原有账号数据</h4>

14.<hr />

15.@Html.ValidationSummary(true)

16.<div class="form-group">

17.@Html.LabelFor(model => model.UserName, new { @class = "control-label col-md-2" })

18.<div class="col-md-10">

19.@Html.EditorFor(model => model.UserName)

20.@Html.ValidationMessageFor(model => model.UserName)

21.</div>

22.</div>

23. 

24.<div class="form-group">

25.@Html.LabelFor(model => model.FirstName, new { @class = "control-label col-md-2" })

26.<div class="col-md-10">

27.@Html.EditorFor(model => model.FirstName)

28.@Html.ValidationMessageFor(model => model.FirstName)

29.</div>

30.</div>

31. 

32.<div class="form-group">

33.@Html.LabelFor(model => model.LastName, new { @class = "control-label col-md-2" })

34.<div class="col-md-10">

35.@Html.EditorFor(model => model.LastName)

36.@Html.ValidationMessageFor(model => model.LastName)

37.</div>

38.</div>

39. 

40.<div class="form-group">

41.@Html.LabelFor(model => model.Email, new { @class = "control-label col-md-2" })

42.<div class="col-md-10">

43.@Html.EditorFor(model => model.Email)

44.@Html.ValidationMessageFor(model => model.Email)

45.</div>

46.</div>

47. 

48.<div class="form-group">

49.<div class="col-md-offset-2 col-md-10">

50.<input type="submit" value="存档" class="btn btn-default" />

51.</div>

52.</div>

53.</div>

54.}

55. 

56.<div>

57.@Html.ActionLink("回到使用者清单画面", "Index")

58.</div>

59. 

60.@section Scripts {

61.@Scripts.Render("~/bundles/jqueryval")

62.}

新增Delete的Views

用以下内容取代原程序

01.@model RoleBaseProject.Models.EditUserViewModel

02. 

03.<h3>使用者账号删除</h3>

04.<div>

05.<h4>确定要删除这个使用者账号?</h4>

06.<hr />

07.<dl class="dl-horizontal">

08.<dt>

09.@Html.DisplayNameFor(model => model.UserName)

10.</dt>

11. 

12.<dd>

13.@Html.DisplayFor(model => model.UserName)

14.</dd>

15. 

16.<dt>

17.@Html.DisplayNameFor(model => model.FirstName)

18.</dt>

19. 

20.<dd>

21.@Html.DisplayFor(model => model.FirstName)

22.</dd>

23. 

24.<dt>

25.@Html.DisplayNameFor(model => model.LastName)

26.</dt>

27. 

28.<dd>

29.@Html.DisplayFor(model => model.LastName)

30.</dd>

31. 

32.<dt>

33.@Html.DisplayNameFor(model => model.Email)

34.</dt>

35. 

36.<dd>

37.@Html.DisplayFor(model => model.Email)

38.</dd>

39. 

40.</dl>

41. 

42.@using (Html.BeginForm()) {

43.@Html.AntiForgeryToken()

44. 

45.<div class="form-actions no-color">

46.<input type="submit" value="删除" class="btn btn-default" /> |

47.@Html.ActionLink("回到使用者清单画面", "Index")

48.</div>

49.}

50.</div>

新增Index Views

用以下内容取代原程序

01.@model IEnumerable<RoleBaseProject.Models.EditUserViewModel>

02. 

03.@{

04.ViewBag.Title = "账号管理";

05.}

06. 

07.<h2>账号管理</h2>

08. 

09.<p>

10.@Html.ActionLink("新增账号", "Register")

11.</p>

12.<table class="table">

13.<tr>

14.<th>

15.@Html.DisplayNameFor(model => model.UserName)

16.</th>

17.<th>

18.@Html.DisplayNameFor(model => model.FirstName)

19.</th>

20.<th>

21.@Html.DisplayNameFor(model => model.LastName)

22.</th>

23.<th>

24.@Html.DisplayNameFor(model => model.Email)

25.</th>

26.<th></th>

27.</tr>

28. 

29.@foreach (var item in Model) {

30.<tr>

31.<td>

32.@Html.DisplayFor(modelItem => item.UserName)

33.</td>

34.<td>

35.@Html.DisplayFor(modelItem => item.FirstName)

36.</td>

37.<td>

38.@Html.DisplayFor(modelItem => item.LastName)

39.</td>

40.<td>

41.@Html.DisplayFor(modelItem => item.Email)

42.</td>

43.<td>

44.@Html.ActionLink("编辑", "Edit", new { id=item.UserName }) |

45.@Html.ActionLink("角色", "UserRoles", new { id=item.UserName }) |

46.@Html.ActionLink("删除", "Delete", new { id=item.UserName })

47.</td>

48.</tr>

49.}

50. 

51.</table>

新增好的三個View

 

 

 

新增UserRoles.cshtml View 并 新增程序代码
 

 

用以下内容取代原程序

01.@model RoleBaseProject.Models.SelectUserRolesViewModel

02.@{

03.ViewBag.Title = "使用者角色";

04.}

05. 

06.<h2>使用者角色 @Html.DisplayFor(model => model.UserName)</h2>

07.<hr />

08. 

09.@using (Html.BeginForm("UserRoles", "Account", FormMethod.Post, new { encType = "multipart/form-data", name = "myform" }))

10.{

11.@Html.AntiForgeryToken()

12. 

13.<div class="form-horizontal">

14.@Html.ValidationSummary(true)

15.<div class="form-group">

16.<div class="col-md-10">

17.@Html.HiddenFor(model => model.UserName)

18.</div>

19.</div>

20. 

21.<h4>选择要加入的角色</h4>

22.<br />

23.<hr />

24. 

25.<table>

26.<tr>

27.<th>

28.勾选

29.</th>

30.<th>

31.角色

32.</th>

33.</tr>

34.@Html.EditorFor(model => model.Roles)

35.</table>

36.<br />

37.<hr />

38. 

39.<div class="form-group">

40.<div class="col-md-offset-2 col-md-10">

41.<input type="submit" value="存档" class="btn btn-default" />

42.</div>

43.</div>

44.</div>

45.}

新增SelectRoleEditorViewModel.cshtml 在 Shared/EditorTemplates目录下

01.@model RoleBaseProject.Models.SelectRoleEditorViewModel

02.@Html.HiddenFor(model => model.RoleName)

03.<tr>

04.<td style="text-align:center">

05.@Html.CheckBoxFor(model => model.Selected)

06.</td>

07.<td>

08.@Html.DisplayFor(model => model.RoleName)

09.</td>

10.</tr>

在主页面上新增”账号管理" 功能按钮

移除主页面上的注册功能

 

 

 

启动 Migration功能
 

 

在Seed()方法中加入建立测试数据的程序代码
 

 

完整程序:

01.namespace RoleBaseProject.Migrations

02.{

03.using RoleBaseProject.Models;

04.using System;

05.using System.Data.Entity;

06.using System.Data.Entity.Migrations;

07.using System.Linq;

08. 

09.internal sealed class Configuration : DbMigrationsConfiguration<RoleBaseProject.Models.ApplicationDbContext>

10.{

11.public Configuration()

12.{

13.AutomaticMigrationsEnabled = false;

14.}

15. 

16.protected override void Seed(RoleBaseProject.Models.ApplicationDbContext context)

17.{

18.// This method will be called after migrating to the latest version.

19. 

20.// You can use the DbSet<T>.AddOrUpdate() helper extension method

21.// to avoid creating duplicate seed data. E.g.

22.//

23.// context.People.AddOrUpdate(

24.// p => p.FullName,

25.// new Person { FullName = "Andrew Peters" },

26.// new Person { FullName = "Brice Lambson" },

27.// new Person { FullName = "Rowan Miller" }

28.// );

29.//

30.this.AddUserAndRoles();

31.}

32. 

33.bool AddUserAndRoles()

34.{

35.bool success = false;

36. 

37.var idManager = new IdentityManager();

38.success = idManager.CreateRole("Admin");

39.if (!success == true) return success;

40. 

41.success = idManager.CreateRole("CanEdit");

42.if (!success == true) return success;

43. 

44.success = idManager.CreateRole("User");

45.if (!success) return success;

46. 

47.var newUser = new ApplicationUser()

48.{

49.UserName = "jatten",

50.FirstName = "John",

51.LastName = "Atten",

52.Email = "jatten@typecastexception.com"

53.};

54. 

55.success = idManager.CreateUser(newUser, "Password1");

56.if (!success) return success;

57. 

58.success = idManager.AddUserToRole(newUser.Id, "Admin");

59.if (!success) return success;

60. 

61.success = idManager.AddUserToRole(newUser.Id, "CanEdit");

62.if (!success) return success;

63. 

64.success = idManager.AddUserToRole(newUser.Id, "User");

65.if (!success) return success;

66. 

67.return success;

68.}

69.}

70.}

更新数据库

执行结果

以具有Admin角色的使用者登入后执行账户管理功能: