using System;
using System.Linq;
using System.Web;
using System.Web.Http;
using System.Web.Security;namespace OtherApi.Auth
{public class AuthFilterOutside : AuthorizeAttribute{//重写基类的验证方式，加入我们自定义的Ticket验证public override void OnAuthorization(System.Web.Http.Controllers.HttpActionContext actionContext){//url获取tokenvar content = actionContext.Request.Properties["MS_HttpContext"] as HttpContextBase;var token = content.Request.Headers["Token"];if (!string.IsNullOrEmpty(token)){//解密用户ticket,并校验用户名密码是否匹配if (ValidateTicket(token)){base.IsAuthorized(actionContext);}else{HandleUnauthorizedRequest(actionContext);}}//如果取不到身份验证信息，并且不允许匿名访问，则返回未验证401else{var attributes = actionContext.ActionDescriptor.GetCustomAttributes<AllowAnonymousAttribute>().OfType<AllowAnonymousAttribute>();bool isAnonymous = attributes.Any(a => a is AllowAnonymousAttribute);if (isAnonymous) base.OnAuthorization(actionContext);else HandleUnauthorizedRequest(actionContext);}}//校验票据（数据库数据匹配）private bool ValidateTicket(string encryptToken){bool flag = false;try{//获取数据库TokenDec.Models.TicketAuth model = Dec.BLL.TicketAuth.GetTicketAuthByToken(encryptToken);if (model.Token == encryptToken) //存在{//未超时flag = (DateTime.Now <= model.ExpireDate) ? true : false;}}catch (Exception ex) { }return flag;}}
}

using System;
using System.Web;
using System.Web.Http;
using System.Web.Security;
using System.Net.Http;
using System.Collections.Generic;
using Newtonsoft.Json;
using Newtonsoft.Json.Linq;
using System.Text;
using OtherApi.Auth;  //引用验证namespace SpiderApi.Controllers
{/// <summary>/// 用户授权接口/// </summary>public class AccountController : ApiController{#region 用户登录授权/// <summary>/// 用户登录授权/// </summary>/// <param name="username">用户名</param>/// <param name="password">密码</param>/// <returns></returns>[Route("api/account/login")][HttpGet]public HttpResponseMessage Login(string username, string password){//定义ResponseResult obj = new ResponseResult();var model = GetLoginModel(username, password);if (model != null){int userId = model.UserId;string Token = UntilHelper.Md5Encode(UntilHelper.GetExtGuidID(), 32);var dtNow = DateTime.Now;#region 将身份信息保存票据表中，验证当前请求是否是有效请求//判断此用户是否存在票据信息if (Dec.BLL.TicketAuth.GetTicketAuthByUserId(userId) != null){//清空重置Dec.BLL.TicketAuth.DeleteByUserId(userId);}Dec.Models.TicketAuth ticket = new Dec.Models.TicketAuth();ticket.UserID = userId;ticket.Token = Token;ticket.CreateDate = dtNow;ticket.ExpireDate = dtNow.AddMinutes(30); //30分钟过期Dec.BLL.TicketAuth.Add(ticket);#endregion//返回信息            obj.status = true;obj.message = "用户登录成功";JObject jo = new JObject();jo.Add("userid", userId);jo.Add("loginname", model.LoginName);jo.Add("nickname", model.NickName);jo.Add("usertype", model.UserType); //(int)UserTypeEnum.Sellerjo.Add("token", Token);obj.info = jo;}else{obj.status = false;obj.message = "用户登录失败";}var resultObj = JsonConvert.SerializeObject(obj, Formatting.Indented);HttpResponseMessage result = new HttpResponseMessage { Content = new StringContent(resultObj, Encoding.GetEncoding("UTF-8"), "application/json") };return result;}#endregion#region 用户退出登录，清空Token/// <summary>/// 用户退出登录，清空Token/// </summary>/// <param name="userId">用户ID</param>/// <returns></returns>[Route("api/account/loginout")][HttpGet]public HttpResponseMessage LoginOut(int userId){//定义ResponseResult obj = new ResponseResult();try{//清空数据库该用户票据数据Dec.BLL.TicketAuth.DeleteByUserId(userId);}catch (Exception ex) { }//返回信息            obj.status = true;obj.message = "成功退出";var resultObj = JsonConvert.SerializeObject(obj);HttpResponseMessage result = new HttpResponseMessage { Content = new StringContent(resultObj, Encoding.GetEncoding("UTF-8"), "application/json") };return result;}#endregion#region 查询Token是否有效/// <summary>/// 查询Token是否有效/// </summary>/// <param name="token">token</param>/// <returns></returns>[Route("api/account/validatetoken")][HttpGet]public HttpResponseMessage ValidateToken(string token){//定义ResponseResult obj = new ResponseResult();bool flag = ValidateTicket(token);if (flag){//返回信息            obj.status = true;obj.message = "token有效";}else{obj.status = false;obj.message = "token无效";}var resultObj = JsonConvert.SerializeObject(obj);HttpResponseMessage result = new HttpResponseMessage { Content = new StringContent(resultObj, Encoding.GetEncoding("UTF-8"), "application/json") };return result;}#endregion#region 获取用户账户余额/// <summary>/// 获取用户账户余额/// </summary>/// <param name="userId">用户ID</param>/// <returns></returns>[Route("api/account/amount")][HttpGet][AuthFilterOutside] //添加验证public HttpResponseMessage GetAmount(int userId){//定义ResponseResult obj = new ResponseResult();//获取数据库数据Dec.Models.UserInfo model = Dec.BLL.UserInfo.GetUserInfoByUserId(userId);if (model != null){//返回信息            obj.status = true;obj.message = "获取用户账户余额成功";JObject jo = new JObject();jo.Add("userid", model.UserId);jo.Add("amount", model.Amount);obj.info = jo;}else{obj.status = false;obj.message = "获取用户账户余额失败";}var resultObj = JsonConvert.SerializeObject(obj);HttpResponseMessage result = new HttpResponseMessage { Content = new StringContent(resultObj, Encoding.GetEncoding("UTF-8"), "application/json") };return result;}#endregion/// <summary>/// 用户充值接口/// </summary>/// <param name="userid">用户ID</param>/// <param name="amount">充值金额</param>/// <returns></returns>[Route("api/account/recharge")][HttpGet][AuthFilterInside]public HttpResponseMessage Recharge(string userid, double amount){//定义ResponseResult obj = new ResponseResult();//获取数据库数据//返回信息            obj.status = true;obj.message = "操作成功，请等待第三方支付平台返回通知核实是否到账";JObject jo = new JObject();jo.Add("userid", "123456789");jo.Add("amount", 125.80);obj.info = jo;var resultObj = JsonConvert.SerializeObject(obj);HttpResponseMessage result = new HttpResponseMessage { Content = new StringContent(resultObj, Encoding.GetEncoding("UTF-8"), "application/json") };return result;}#region 验证票据是否有效/// <summary>/// 验证票据是否有效/// </summary>/// <param name="encryptToken">token</param>/// <returns></returns>private bool ValidateTicket(string encryptToken){bool flag = false;try{//获取数据库TokenDec.Models.TicketAuth model = Dec.BLL.TicketAuth.GetTicketAuthByToken(encryptToken);if (model.Token == encryptToken) //存在{//未超时flag = (DateTime.Now <= model.ExpireDate) ? true : false;}}catch (Exception ex) { }return flag;}#endregion#region 用户登录/// <summary>/// 用户登录/// </summary>/// <param name="userName">用户名</param>/// <param name="userPwd">密码</param>/// <returns></returns>private Dec.Models.UserInfo GetLoginModel(string userName, string userPwd){Dec.Models.UserInfo model = new Dec.Models.UserInfo();try{if (!string.IsNullOrWhiteSpace(userName) && !string.IsNullOrWhiteSpace(userPwd)){//数据库比对model = Dec.BLL.UserInfo.GetUserInfoByUserNamePwd(userName, UntilHelper.Md5Encode(userPwd, 32));}}catch (Exception ex) { }return model;}#endregion}
}

//
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.Http;
using System.Web.Mvc;
using System.Web.Routing;namespace SpiderApi
{public class WebApiApplication : System.Web.HttpApplication{protected void Application_Start(){//WebApi文档AreaRegistration.RegisterAllAreas();GlobalConfiguration.Configure(WebApiConfig.Register);}protected void Application_PostAuthorizeRequest(){//Enable SessionHttpContext.Current.SetSessionStateBehavior(System.Web.SessionState.SessionStateBehavior.Required);}}
}

// Uncomment the following to provide samples for PageResult<T>. Must also add the Microsoft.AspNet.WebApi.OData
// package to your project. 先安装Help Page包  HelpPage=>App_start=>HelpPageConfig.cs
#define Handle_PageResultOfTusing System;
using System.Collections;
using System.Collections.Generic;
using System.Diagnostics;
using System.Diagnostics.CodeAnalysis;
using System.Linq;
using System.Net.Http.Headers;
using System.Reflection;
using System.Web;
using System.Web.Http;
using SpiderApi.Models;
#if Handle_PageResultOfT
using System.Web.Http.OData;
#endifnamespace SpiderApi.Areas.HelpPage
{/// <summary>/// Use this class to customize the Help Page./// For example you can set a custom <see cref="System.Web.Http.Description.IDocumentationProvider"/> to supply the documentation/// or you can provide the samples for the requests/responses./// </summary>public static class HelpPageConfig{[SuppressMessage("Microsoft.Globalization", "CA1303:Do not pass literals as localized parameters",MessageId = "SpiderApi.Areas.HelpPage.TextSample.#ctor(System.String)",Justification = "End users may choose to merge this string with existing localized resources.")][SuppressMessage("Microsoft.Naming", "CA2204:Literals should be spelled correctly",MessageId = "bsonspec",Justification = "Part of a URI.")]public static void Register(HttpConfiguration config){Uncomment the following to use the documentation from XML documentation file.//开启解析config.SetDocumentationProvider(new XmlDocumentationProvider(HttpContext.Current.Server.MapPath("~/Bin/SpiderApi.XML")));Uncomment the following to use "sample string" as the sample for all actions that have string as the body parameter or return type.Also, the string arrays will be used for IEnumerable<string>. The sample objects will be serialized into different media type formats by the available formatters.//config.SetSampleObjects(new Dictionary<Type, object>//{//    {typeof(string), "sample string"},//    {typeof(IEnumerable<string>), new string[]{"sample 1", "sample 2"}}//});//添加映射config.SetSampleResponse(Sample.BatchSendMessageResponse(), new MediaTypeHeaderValue("text/json"), "MessageQueue", "BatchSendMessage");config.SetSampleResponse(Sample.BatchReceiveMessageResponse(), new MediaTypeHeaderValue("text/json"), "MessageQueue", "BatchReceiveMessage");config.SetSampleResponse(Sample.DeleteMessageResponse(), new MediaTypeHeaderValue("text/json"), "MessageQueue", "DeleteMessage");config.SetSampleResponse(Sample.BatchDeleteMessageResponse(), new MediaTypeHeaderValue("text/json"), "MessageQueue", "BatchDeleteMessage");config.SetSampleResponse(Sample.ChangeMessageVisibilityResponse(), new MediaTypeHeaderValue("text/json"), "MessageQueue", "ChangeMessageVisibility");// Extend the following to provide factories for types not handled automatically (those lacking parameterless// constructors) or for which you prefer to use non-default property values. Line below provides a fallback// since automatic handling will fail and GeneratePageResult handles only a single type.
#if Handle_PageResultOfTconfig.GetHelpPageSampleGenerator().SampleObjectFactories.Add(GeneratePageResult);
#endif// Extend the following to use a preset object directly as the sample for all actions that support a media// type, regardless of the body parameter or return type. The lines below avoid display of binary content.// The BsonMediaTypeFormatter (if available) is not used to serialize the TextSample object.config.SetSampleForMediaType(new TextSample("Binary JSON content. See http://bsonspec.org for details."),new MediaTypeHeaderValue("application/bson"));Uncomment the following to use "[0]=foo&[1]=bar" directly as the sample for all actions that support form URL encoded formatand have IEnumerable<string> as the body parameter or return type.//config.SetSampleForType("[0]=foo&[1]=bar", new MediaTypeHeaderValue("application/x-www-form-urlencoded"), typeof(IEnumerable<string>));Uncomment the following to use "1234" directly as the request sample for media type "text/plain" on the controller named "Values"and action named "Put".//config.SetSampleRequest("1234", new MediaTypeHeaderValue("text/plain"), "Values", "Put");Uncomment the following to use the image on "../images/aspNetHome.png" directly as the response sample for media type "image/png"on the controller named "Values" and action named "Get" with parameter "id".//config.SetSampleResponse(new ImageSample("../images/aspNetHome.png"), new MediaTypeHeaderValue("image/png"), "Values", "Get", "id");Uncomment the following to correct the sample request when the action expects an HttpRequestMessage with ObjectContent<string>.The sample will be generated as if the controller named "Values" and action named "Get" were having string as the body parameter.//config.SetActualRequestType(typeof(string), "Values", "Get");Uncomment the following to correct the sample response when the action returns an HttpResponseMessage with ObjectContent<string>.The sample will be generated as if the controller named "Values" and action named "Post" were returning a string.//config.SetActualResponseType(typeof(string), "Values", "Post");}#if Handle_PageResultOfTprivate static object GeneratePageResult(HelpPageSampleGenerator sampleGenerator, Type type){if (type.IsGenericType){Type openGenericType = type.GetGenericTypeDefinition();if (openGenericType == typeof(PageResult<>)){// Get the T in PageResult<T>Type[] typeParameters = type.GetGenericArguments();Debug.Assert(typeParameters.Length == 1);// Create an enumeration to pass as the first parameter to the PageResult<T> constuctorType itemsType = typeof(List<>).MakeGenericType(typeParameters);object items = sampleGenerator.GetSampleObject(itemsType);// Fill in the other information needed to invoke the PageResult<T> constuctorType[] parameterTypes = new Type[] { itemsType, typeof(Uri), typeof(long?), };object[] parameters = new object[] { items, null, (long)ObjectGenerator.DefaultCollectionSize, };// Call PageResult(IEnumerable<T> items, Uri nextPageLink, long? count) constructorConstructorInfo constructor = type.GetConstructor(parameterTypes);return constructor.Invoke(parameters);}}return null;}
#endif}
}

/*
API接口测试工具 - WebApiTestClient使用--Nuget引入组件
--A Simple Test Client for ASP.NET Web API
*/
/*
1、修改Api.cshtml文件
通过上述步骤，就能将组件WebAPITestClient引入进来。下面我们只需要做一件事：打开文件 (根据 Areas\HelpPage\Views\Help) Api.cshtml 并添加以下内容:@Html.DisplayForModel("TestClientDialogs")
@Html.DisplayForModel("TestClientReferences")
添加后Api.cshtml文件的代码如下
*/@using System.Web.Http
@using WebApiTestClient.Areas.HelpPage.Models
@model HelpPageApiModel@{var description = Model.ApiDescription;ViewBag.Title = description.HttpMethod.Method + " " + description.RelativePath;
}<link type="text/css" href="~/Areas/HelpPage/HelpPage.css" rel="stylesheet" />
<div id="body" class="help-page"><section class="featured"><div class="content-wrapper"><p>@Html.ActionLink("Help Page Home", "Index")</p></div></section><section class="content-wrapper main-content clear-fix">@Html.DisplayForModel()</section>
</div>@Html.DisplayForModel("TestClientDialogs")
@section Scripts{<link href="~/Areas/HelpPage/HelpPage.css" rel="stylesheet" />@Html.DisplayForModel("TestClientReferences")
}