using BMOA.Application.System; using BMOA.Common; using BMOA.Web.Models; using Newtonsoft.Json; using System; using System.Collections.Generic; using System.Configuration; using System.Linq; using System.Net.Http; using System.Web; using System.Web.Http.Controllers; using System.Web.Http.Filters; namespace KBMOA.Web.Filter { /// <summary> /// Api请求过滤器 /// </summary> public class ApiFilter : ActionFilterAttribute { /// <summary> /// 小程序端请使用sha1加密appkey /// </summary> /// <param name="actionContext"></param> public override void OnActionExecuting(HttpActionContext actionContext) { string appkey = string.Empty; string apppwd = string.Empty; if (actionContext.Request.Headers.Contains("appkey")) { appkey = HttpUtility.UrlDecode(actionContext.Request.Headers.GetValues("appkey").FirstOrDefault()); } if (actionContext.Request.Headers.Contains("apppwd")) { apppwd = HttpUtility.UrlDecode(actionContext.Request.Headers.GetValues("apppwd").FirstOrDefault()); } //判断请求头是否包含以下参数 if (string.IsNullOrEmpty(appkey) || string.IsNullOrEmpty(apppwd)) { Check(actionContext); base.OnActionExecuting(actionContext); } if (appkey.Equals(YG_Config.appkey) == false || string.Equals(apppwd, ZEncypt.Sha1(appkey), StringComparison.CurrentCultureIgnoreCase) == false) { Check(actionContext); base.OnActionExecuting(actionContext); } } private void Check(HttpActionContext actionContext) { ResponseModel result = new ResponseModel() { Success = false }; result.Message = "此请求未经授权"; actionContext.Response = actionContext.Request.CreateResponse(result); } } }
请发表评论