initial
This commit is contained in:
@@ -0,0 +1,8 @@
|
||||
@page
|
||||
@model _2021_backend.Pages.Account.AccessDeniedModel
|
||||
@{
|
||||
ViewData["Title"] = "认证失败";
|
||||
}
|
||||
|
||||
<h1>权限不足</h1>
|
||||
<h3>认证失败，您没有足够的权限进行操作，请联系系统管理员</h3>
|
||||
@@ -0,0 +1,17 @@
|
||||
using System;
|
||||
using System.Collections.Generic;
|
||||
using System.Linq;
|
||||
using System.Threading.Tasks;
|
||||
using Microsoft.AspNetCore.Mvc;
|
||||
using Microsoft.AspNetCore.Mvc.RazorPages;
|
||||
|
||||
namespace _2021_backend.Pages.Account
|
||||
{
|
||||
public class AccessDeniedModel : PageModel
|
||||
{
|
||||
public void OnGet()
|
||||
{
|
||||
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,9 @@
|
||||
@page
|
||||
@model _2021_backend.Pages.Account.DeniedModel
|
||||
@{
|
||||
ViewData["Title"] = "登录";
|
||||
}
|
||||
|
||||
<h1>登录</h1>
|
||||
<h3>认证失败，请重新登录或联系系统管理员</h3>
|
||||
<button class="btn btn-primary" asp-area="/" asp-page="/Account/Login">重新登录</button>
|
||||
@@ -0,0 +1,17 @@
|
||||
using System;
|
||||
using System.Collections.Generic;
|
||||
using System.Linq;
|
||||
using System.Threading.Tasks;
|
||||
using Microsoft.AspNetCore.Mvc;
|
||||
using Microsoft.AspNetCore.Mvc.RazorPages;
|
||||
|
||||
namespace _2021_backend.Pages.Account
|
||||
{
|
||||
public class DeniedModel : PageModel
|
||||
{
|
||||
public void OnGet()
|
||||
{
|
||||
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,35 @@
|
||||
@page
|
||||
@model _2021_backend.Pages.Account.LoginModel
|
||||
@{
|
||||
ViewData["Title"] = "登录";
|
||||
}
|
||||
|
||||
<h1>登录</h1>
|
||||
|
||||
<div class="row">
|
||||
<div class="col-md-8">
|
||||
<section>
|
||||
<form asp-controller="Account" asp-action="Login" asp-route-returnurl="@ViewData["ReturnUrl"]" method="post" class="form-horizontal" role="form">
|
||||
<div class="form-group">
|
||||
<label class="col-md-2 control-label">学号</label>
|
||||
<div class="col-md-10">
|
||||
<input type="text" name="username" />
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="form-group">
|
||||
<label class="col-md-2 control-label">密码</label>
|
||||
<div class="col-md-10">
|
||||
<input type="password" name="password" />
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="form-group">
|
||||
<div class="col-md-offset-2 col-md-10">
|
||||
<button type="submit" class="btn btn-primary">冲!</button>
|
||||
</div>
|
||||
</div>
|
||||
</form>
|
||||
</section>
|
||||
</div>
|
||||
</div>
|
||||
@@ -0,0 +1,148 @@
|
||||
using _2021_backend.Data;
|
||||
using _2021_backend.Models;
|
||||
using _2021_backend.Utils;
|
||||
using Microsoft.AspNetCore.Authentication;
|
||||
using Microsoft.AspNetCore.Authentication.Cookies;
|
||||
using Microsoft.AspNetCore.Mvc;
|
||||
using Microsoft.AspNetCore.Mvc.RazorPages;
|
||||
using Microsoft.EntityFrameworkCore;
|
||||
using Microsoft.Extensions.Configuration;
|
||||
using Newtonsoft.Json;
|
||||
using Newtonsoft.Json.Linq;
|
||||
using System;
|
||||
using System.Linq;
|
||||
using System.Security.Claims;
|
||||
using System.Threading.Tasks;
|
||||
|
||||
namespace _2021_backend.Pages.Account
|
||||
{
|
||||
public class LoginModel : PageModel
|
||||
{
|
||||
private readonly string LoginURL = "https://xms.zjueva.net/api/auth/login";
|
||||
private readonly IConfiguration config;
|
||||
private readonly BackendContext context;
|
||||
public LoginModel(IConfiguration configuration, BackendContext context)
|
||||
{
|
||||
config = configuration;
|
||||
this.context = context;
|
||||
}
|
||||
|
||||
public IActionResult OnGet(string returnUrl = null)
|
||||
{
|
||||
ViewData["ReturnUrl"] = returnUrl;
|
||||
return Page();
|
||||
}
|
||||
[BindProperty]
|
||||
public string username { get; set; }
|
||||
[BindProperty]
|
||||
public string password { get; set; }
|
||||
|
||||
public async Task<IActionResult> OnPostAsync()
|
||||
{
|
||||
if (!ModelState.IsValid)
|
||||
{
|
||||
return Page();
|
||||
}
|
||||
var NowSecret = EvaCryptoHelper.Password2Secret(password);
|
||||
string stuID = username;
|
||||
var query = from _user in context.Users
|
||||
where _user.stuID == stuID
|
||||
select _user;
|
||||
var user = await query.AsNoTracking().FirstOrDefaultAsync();
|
||||
|
||||
//need use xms login service
|
||||
if (user == null)
|
||||
{
|
||||
Login login_Stu = new Login(username, password);
|
||||
|
||||
//post login information to xms.zjueva.net and receive the response with string
|
||||
|
||||
string ansString = LoginHelper.PostMoths(LoginURL, login_Stu);
|
||||
JObject ansJson = (JObject)JsonConvert.DeserializeObject(ansString);
|
||||
|
||||
//error and Denied
|
||||
if (ansJson["status"].ToString() == "error")
|
||||
{
|
||||
return RedirectToPage("/Account/Denied");
|
||||
}
|
||||
else if (ansJson["status"].ToString() == "success")
|
||||
{
|
||||
User add_user = new User()
|
||||
{
|
||||
stuID = ansJson["data"]["stuid"].ToString(),
|
||||
Name = ansJson["data"]["name"].ToString(),
|
||||
Secret = login_Stu.GetSHASecret(),
|
||||
isManager = login_Stu.isManager()
|
||||
};
|
||||
context.Users.Add(add_user);
|
||||
await context.SaveChangesAsync();
|
||||
//add new user to DB and now continue to create cookie;
|
||||
user = add_user;
|
||||
//this user is correct and don't use the follow "else"
|
||||
}
|
||||
}
|
||||
if (user.Secret == NowSecret)
|
||||
{
|
||||
var identity = new ClaimsIdentity(CookieAuthenticationDefaults.AuthenticationScheme, ClaimTypes.Name, ClaimTypes.Role);
|
||||
identity.AddClaim(new Claim(ClaimTypes.Name, user.Name));
|
||||
identity.AddClaim(new Claim(ClaimTypes.Sid, user.Guid.ToString()));
|
||||
identity.AddClaim(new Claim(ClaimTypes.NameIdentifier, username));
|
||||
if (user.isManager)
|
||||
{
|
||||
identity.AddClaim(new Claim(EvaClaimTypes.IsManager, "true"));
|
||||
identity.AddClaim(new Claim(ClaimTypes.Role, "manager"));
|
||||
}
|
||||
else
|
||||
{
|
||||
identity.AddClaim(new Claim(ClaimTypes.Role, "user"));
|
||||
}
|
||||
var Iprinciple = new ClaimsPrincipal(identity);
|
||||
await HttpContext.SignInAsync(
|
||||
CookieAuthenticationDefaults.AuthenticationScheme,
|
||||
Iprinciple,
|
||||
new AuthenticationProperties
|
||||
{
|
||||
IsPersistent = true,
|
||||
AllowRefresh = true
|
||||
}
|
||||
);
|
||||
return RedirectToPage("/Students/Index");
|
||||
}
|
||||
|
||||
//if user change his secret in XMS
|
||||
else
|
||||
{
|
||||
Login login_Stu = new Login(username, password);
|
||||
|
||||
//post login information to xms.zjueva.net and receive the response with string
|
||||
|
||||
string ansString = LoginHelper.PostMoths(LoginURL, login_Stu);
|
||||
JObject ansJson = (JObject)JsonConvert.DeserializeObject(ansString);
|
||||
|
||||
//error and Denied
|
||||
if (ansJson["status"].ToString() == "error")
|
||||
{
|
||||
return RedirectToPage("/Account/Denied");
|
||||
}
|
||||
else
|
||||
{
|
||||
//change the secret in DB
|
||||
user = await context.Users.FirstOrDefaultAsync(r => r.stuID == stuID);
|
||||
user.Secret = login_Stu.GetSHASecret();
|
||||
context.Attach(user).State = EntityState.Modified;
|
||||
try
|
||||
{
|
||||
await context.SaveChangesAsync();
|
||||
}
|
||||
catch (DbUpdateConcurrencyException)
|
||||
{
|
||||
return NotFound();
|
||||
}
|
||||
return RedirectToPage("/Index");
|
||||
}
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,8 @@
|
||||
@page
|
||||
@model _2021_backend.Pages.Account.LogoutModel
|
||||
@{
|
||||
ViewData["Title"] = "登出";
|
||||
}
|
||||
|
||||
<h1>正在登出</h1>
|
||||
<h3>请稍后</h3>
|
||||
@@ -0,0 +1,19 @@
|
||||
using System;
|
||||
using System.Collections.Generic;
|
||||
using System.Linq;
|
||||
using System.Threading.Tasks;
|
||||
using Microsoft.AspNetCore.Mvc;
|
||||
using Microsoft.AspNetCore.Mvc.RazorPages;
|
||||
using Microsoft.AspNetCore.Authentication;
|
||||
using Microsoft.AspNetCore.Authentication.Cookies;
|
||||
namespace _2021_backend.Pages.Account
|
||||
{
|
||||
public class LogoutModel : PageModel
|
||||
{
|
||||
public async Task<IActionResult> OnGet()
|
||||
{
|
||||
await HttpContext.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
|
||||
return RedirectToPage("/Index");
|
||||
}
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user