[转]asp.net权限认证：HTTP基本认证（http basic）

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

public class BasicAuthorizeAttribute : AuthorizeAttribute

{

    protected override bool IsAuthorized(System.Web.Http.Controllers.HttpActionContext actionContext)

    {

        if (actionContext.Request.Method == HttpMethod.Options) return true;

        if (actionContext.Request.Headers.Authorization != null && actionContext.Request.Headers.Authorization.Parameter != null)

        {

            var authorizationParameter = Convert.FromBase64String(actionContext.Request.Headers.Authorization.Parameter);

            var basicArray = Encoding.Default.GetString(authorizationParameter).Split(‘:‘);

            var userid = basicArray[0];

            var password = basicArray[1];

            if (userid == "123456" && password == "123456")

            {

                return true;

            }

        }

        return false;

    }

    protected override void HandleUnauthorizedRequest(HttpActionContext actionContext)

    {

        var responseMessage = new HttpResponseMessage(HttpStatusCode.Unauthorized);

        responseMessage.Headers.Add("WWW-Authenticate", "Basic");

        throw new HttpResponseException(responseMessage);

    }

}

2

3

4

5

[BasicAuthorize]

public IEnumerable<string> Get()

{

    return new string[] { "value1", "value2" };

}