目录

1       大概思路... 1

2       Nginx集群之基于Redis的WebApi身份验证... 1

3       Redis数据库... 2

4       Visualbox虚拟机ubuntu下的redis部署... 3

5       编写.NET WebApi的OnAuthorization身份验证... 6

6       编写.NET WebApi的ActionFilterAttribute令牌验证... 8

7       编写.NET WebApi的服务端... 10

8       编写.NET WebApi的客户端... 11

9       部署WebApi到本机... 17

10     Nginx集群配置搭建... 18

11     运行结果... 19

12     总结... 20

sudo iptables -I INPUT -p tcp --dport 6379 -j ACCEPT

redis-cli
config set requirepass 123456

Microsoft Windows [版本 6.1.7601]
版权所有 (c) 2009 Microsoft Corporation。保留所有权利。C:\Users\zhyongfeng>telnet 10.93.85.66 6379

using System.Web.Http;
using System.Web.Http.Controllers;namespace SSLWebApi.Controllers
{public class CustomAuthorizeAttribute : AuthorizeAttribute{public override void OnAuthorization(HttpActionContext actionContext){//判断用户是否登录if (actionContext.Request.Headers.Authorization != null){string userInfo = System.Text.Encoding.Default.GetString(System.Convert.FromBase64String(actionContext.Request.Headers.Authorization.Parameter));//用户验证逻辑  if (string.Equals(userInfo, string.Format("{0}:{1}", "zhyongfeng", "123456"))){IsAuthorized(actionContext);}else{HandleUnauthorizedRequest(actionContext);}}else{HandleUnauthorizedRequest(actionContext);}}protected override void HandleUnauthorizedRequest(System.Web.Http.Controllers.HttpActionContext actionContext){var challengeMessage = new System.Net.Http.HttpResponseMessage(System.Net.HttpStatusCode.Unauthorized);challengeMessage.Headers.Add("WWW-Authenticate", "Basic");throw new System.Web.Http.HttpResponseException(challengeMessage);}}
}

using ServiceStack.Redis;
using SSLWebApi.Models;
using System;
using System.Web;
using System.Web.Http;namespace SSLWebApi.Controllers
{/// <summary>/// BaseController继承BaseController则需要身份验证/// </summary>[CustomAuthorize][RoutePrefix("api/Base")]public class BaseController : ApiController{[HttpGet][Route("Login")]public string Login(string userId){if (HttpRuntime.Cache.Get(userId) == null){return CreateToken(userId);}else{HttpRuntime.Cache.Remove(userId);return CreateToken(userId);}}/// <summary>/// 生成token/// </summary>/// <param name="userId"></param>/// <returns></returns>private string CreateToken(string userId){Token token = new Token();token.UserId = userId;token.SignToken = Guid.NewGuid();token.Seconds = 12;token.ExpireTime = DateTime.Now.AddSeconds(token.Seconds);//redis使用sudo iptables -A INPUT -p tcp --dport 6379 -j ACCEPT打开6379的端口//visualbox虚拟机使用“设置->网络->高级->端口转发”创建商品规则//连接远程visualbox虚拟机ubtuntu的redis，形成一个分布式的登录验证string remoteIp = "10.93.85.66";int remotePort = 6379;string remoteDbPassword = "123456";//RedisClient(地址,端口，密码，0)using (var client = new RedisClient(remoteIp, remotePort, remoteDbPassword, 0)){string strToken = token.SignToken.ToString();if (client.Exists(userId) > 0)client.Del(userId);if (client.Add(userId, strToken)){//设置key的过期时间为12sclient.Expire(userId, 12);return token.SignToken.ToString();}elsereturn string.Format("远程虚拟机{0}的redis创建token失败", remoteIp);}}}
}

using ServiceStack.Redis;
using SSLWebApi.Models;
using System;
using System.Linq;
using System.Net.Http;
using System.Web;
using System.Web.Http.Controllers;
using System.Web.Http.Filters;namespace SSLWebApi.Filter
{public class WebApiSecurityFilter : ActionFilterAttribute{public override void OnActionExecuting(HttpActionContext actionContext){if (actionContext.ActionDescriptor.ActionName == "Login"){//登录成功则生成tokenbase.OnActionExecuting(actionContext);return;}else{//判断token令牌HttpRequestMessage request = actionContext.Request;string staffid = request.Headers.Contains("userid") ? HttpUtility.UrlDecode(request.Headers.GetValues("userid").FirstOrDefault()) : string.Empty;string timestamp = request.Headers.Contains("timestamp") ? HttpUtility.UrlDecode(request.Headers.GetValues("timestamp").FirstOrDefault()) : string.Empty;string nonce = request.Headers.Contains("nonce") ? HttpUtility.UrlDecode(request.Headers.GetValues("nonce").FirstOrDefault()) : string.Empty;string signature = request.Headers.Contains("signature") ? HttpUtility.UrlDecode(request.Headers.GetValues("signature").FirstOrDefault()) : string.Empty;if (String.IsNullOrEmpty(staffid) || String.IsNullOrEmpty(timestamp) || String.IsNullOrEmpty(nonce) || String.IsNullOrEmpty(signature)){//令牌检验不通过actionContext.Response = new HttpResponseMessage(System.Net.HttpStatusCode.Forbidden);return;}else{string remoteIp = "10.93.85.66";int remotePort = 6379;string remoteDbPassword = "123456";using (var client = new RedisClient(remoteIp, remotePort, remoteDbPassword, 0)){//令牌检验是否存在这个用户if (client.Exists(staffid) > 0){string tempStr = System.Text.Encoding.UTF8.GetString(client.Get(staffid));if (tempStr.Trim('"').Equals(signature)){//时间转换成功、时间有效、token值相等//令牌通过base.OnActionExecuting(actionContext);return;}else{actionContext.Response = new HttpResponseMessage(System.Net.HttpStatusCode.Forbidden);return;}}else{actionContext.Response = new HttpResponseMessage(System.Net.HttpStatusCode.Forbidden);return;}}}}}}
}

using System;
using System.Net;
using System.Web.Http;namespace SSLWebApi.Controllers
{[RoutePrefix("api/User")]public class UserController : ApiController{/// <summary>/// 获取当前用户信息/// </summary>/// <param name="msg"></param>/// <returns></returns>[HttpPost][Route("PostMessage")]public string PostMessage(dynamic obj){return string.Format("当前输入的消息是:{0}", Convert.ToString(obj.msg));}[Route("GetMachine")]public string GetMachine(){string AddressIP = string.Empty;foreach (IPAddress _IPAddress in Dns.GetHostEntry(Dns.GetHostName()).AddressList){if (_IPAddress.AddressFamily.ToString() == "InterNetwork"){AddressIP = _IPAddress.ToString();}}return string.Format("当前WebApi部署的IP是：{0}", AddressIP);}}
}

using Newtonsoft.Json;
using System;
using System.IO;
using System.Net;
using System.Text;namespace SSLWebApiClient.Common
{public class WebApiHelper{/// <summary>/// Post请求/// </summary>/// <typeparam name="T"></typeparam>/// <param name="url">url</param>/// <param name="data">数据</param>/// <param name="userid">帐户</param>/// <param name="signature">数字签名</param>/// <returns></returns>public static string Post(string url, string data, string userid, string signature){return PostData(url, data, userid, signature);}/// <summary>/// Post请求/// </summary>/// <typeparam name="T"></typeparam>/// <param name="url">url</param>/// <param name="data">数据</param>/// <param name="userid">帐户</param>/// <param name="signature">数字签名</param>/// <returns></returns>public static T Post<T>(string url, string data, string userid, string signature){return JsonConvert.DeserializeObject<T>(Post(url, data, userid, signature));}/// <summary>/// /// </summary>/// <param name="webApi"></param>/// <param name="queryStr"></param>/// <param name="userid"></param>/// <param name="signature"></param>/// <returns></returns>public static string Get(string webApi, string queryStr, string userid, string signature){return GetData(webApi, queryStr, userid, signature);}/// <summary>/// Get请求/// </summary>/// <typeparam name="T"></typeparam>/// <param name="webApi"></param>/// <param name="query"></param>/// <param name="queryStr"></param>/// <param name="userid"></param>/// <param name="signature"></param>/// <returns></returns>public static T Get<T>(string webApi, string queryStr, string userid, string signature){return JsonConvert.DeserializeObject<T>(GetData(webApi, queryStr, userid, signature));}/// <summary>  /// 获取时间戳  /// </summary>  /// <returns></returns>  private static string GetTimeStamp(){TimeSpan ts = DateTime.Now - new DateTime(1970, 1, 1, 0, 0, 0, 0);return ts.TotalSeconds.ToString();}/// <summary>  /// 获取随机数/// </summary>  /// <returns></returns>  private static string GetRandom(){Random rd = new Random(DateTime.Now.Millisecond);int i = rd.Next(0, int.MaxValue);return i.ToString();}/// <summary>/// Post请求/// </summary>/// <param name="url"></param>/// <param name="data"></param>/// <param name="userid">用户名称</param>/// <param name="signature">数字签名</param>/// <returns></returns>private static string PostData(string url, string data, string userid, string signature){try{byte[] bytes = Encoding.UTF8.GetBytes(data);HttpWebRequest request = (HttpWebRequest)WebRequest.Create(url);string timeStamp = GetTimeStamp();string nonce = GetRandom();//加入头信息//当前请求用户request.Headers.Add("userid", userid);//发起请求时的时间戳（单位：秒）request.Headers.Add("timestamp", timeStamp);//发起请求时的时间戳（单位：秒）request.Headers.Add("nonce", nonce);//当前请求内容的数字签名request.Headers.Add("signature", signature);//写数据request.Method = "POST";request.ContentLength = bytes.Length;request.ContentType = "application/json";request.GetRequestStream().Write(bytes, 0, bytes.Length);//读数据request.Timeout = 300000;request.Headers.Set("Pragma", "no-cache");HttpWebResponse response = (HttpWebResponse)request.GetResponse();Stream streamReceive = response.GetResponseStream();StreamReader streamReader = new StreamReader(streamReceive, Encoding.UTF8);string strResult = streamReader.ReadToEnd();//关闭流//reqstream.Close();streamReader.Close();streamReceive.Close();request.Abort();response.Close();return strResult;}catch (Exception ex){return ex.Message;}}/// <summary>/// Get请求/// </summary>/// <param name="webApi"></param>/// <param name="queryStr"></param>/// <param name="userid"></param>/// <param name="signature"></param>/// <returns></returns>private static string GetData(string webApi, string queryStr, string userid, string signature){try{HttpWebRequest request = (HttpWebRequest)WebRequest.Create(webApi + "?" + queryStr);string timeStamp = GetTimeStamp();string nonce = GetRandom();//加入头信息//当前请求用户request.Headers.Add("userid", userid);//发起请求时的时间戳（单位：秒）request.Headers.Add("timestamp", timeStamp);//发起请求时的时间戳（单位：秒）request.Headers.Add("nonce", nonce);//当前请求内容的数字签名request.Headers.Add("signature", signature);request.Method = "GET";request.ContentType = "application/json";request.Timeout = 90000;request.Headers.Set("Pragma", "no-cache");HttpWebResponse response = (HttpWebResponse)request.GetResponse();Stream streamReceive = response.GetResponseStream();StreamReader streamReader = new StreamReader(streamReceive, Encoding.UTF8);string strResult = streamReader.ReadToEnd();streamReader.Close();streamReceive.Close();request.Abort();response.Close();return strResult;}catch (Exception ex){return ex.Message;}}}
}

using System;
using System.IO;
using System.Net;
using System.Text;
using Newtonsoft.Json;
namespace SSLWebApiClient
{class Program{static void Main(string[] args){string basicUrl = "http://zhyongfeng.com";string html = string.Empty;for (int i = 0; i < 1; i++){//https协议基本认证 Authorizationstring url = basicUrl + "/api/base/Login?userId=zhyongfeng";ServicePointManager.ServerCertificateValidationCallback = delegate { return true; };HttpWebRequest req = (HttpWebRequest)WebRequest.Create(url);NetworkCredential credential = new NetworkCredential("zhyongfeng", "123456");req.Credentials = credential;HttpWebResponse response = (HttpWebResponse)req.GetResponse();Stream responseStream = response.GetResponseStream();StreamReader streamReader = new StreamReader(responseStream, Encoding.UTF8);html = streamReader.ReadToEnd().Replace("\"", "");Console.WriteLine("Redis Token服务器保存时间为12s");Console.WriteLine(String.Format("Redis服务器返回的Token值为:{0}", html));}//token设置了12s有效期for (int j = 0; j < 5; j++){System.Threading.Thread.Sleep(1000);string url = basicUrl + "/api/user/PostMessage";Console.WriteLine(Common.WebApiHelper.Post(url, JsonConvert.SerializeObject(new { msg = "hello" }), "zhyongfeng", html));}for (int j = 0; j < 10; j++){System.Threading.Thread.Sleep(1000);string url = basicUrl + "/api/user/GetMachine";Console.WriteLine(Common.WebApiHelper.Get(url, null, "zhyongfeng", html));}Console.Read();}}
}

10.93.85.66     zhyongfeng.com

worker_processes  1;
events {worker_connections  1024;
}http {include       mime.types;default_type  application/octet-stream;sendfile        on;keepalive_timeout  65;

upstream zhyongfeng.com {server       10.93.85.66:20107;}server {listen       80;server_name  localhost;location / {proxy_pass   http://zhyongfeng.com;}error_page   500 502 503 504  /50x.html;location = /50x.html {root   html;}}
}

D:\DTLDownLoads\nginx-1.10.2>start nginxD:\DTLDownLoads\nginx-1.10.2>nginx -s reload