c# – 如何持久保存Application_AuthenticateRequest中所需的会

我们需要在一定数量的用户不活动之后使数据到期的方法(我们不希望所有用户都在内存中保留所有角色),因此我们将实现自己的过期机制(在我的示例中为20分钟).

这是我写这个课的方式,以及我将如何使用它：

/// <summary>
    /// This is the static class that will hold the roles for all active users (active users 
    /// are those that have been using the website within the last 20 minutes).
    /// </summary>
    public static class MyRoles
    {
        /// <summary>
        /// This class holds your roles
        /// </summary>
        private class Principal
        {
            private DateTime lastAccess; // Our expiration timer
            private System.Security.Principal.GenericPrincipal principal; // Our roles

            public Principal(System.Security.Principal.GenericPrincipal principal)
            {
                this.principal = principal;
                this.lastAccess = DateTime.Now;
            }

            public System.Security.Principal.GenericPrincipal GenericPrincipal
            {
                get
                { 
                    // We reset our timer. It will expire 20 minutes from now. 
                    this.lastAccess = DateTime.Now;

                    return principal;
                }
            }                                

            /// <summary>
            /// This tells us if a user has been active in the last 20 minutes
            /// </summary>
            public bool IsValid
            {
                get
                {
                    // Valid within 20 minutes from last call
                    return DateTime.Now <= this.lastAccess.AddMinutes(20);                        
                }
            }
        }

        /// <summary>
        /// This will hold IDs and related roles
        /// </summary>
        private static Dictionary<string,Principal> ids = new Dictionary<string,Principal>();

        /// <summary>
        /// Method to retrieve roles for a given ID
        /// </summary>
        /// <param name="header">Our ID</param>
        /// <returns></returns>
        public static System.Security.Principal.GenericPrincipal GetRoles(string header)
        {
            if (ids.ContainsKey(header) && ids[header].IsValid)
            {
                // We have roles for this ID
                return ids[header].GenericPrincipal;
            }
            else
            {
                // We don't have this ID (or it's expired) so get it from the web service
                var id = new System.Security.Principal.GenericIdentity(header);
                var principal = new System.Security.Principal.GenericPrincipal(id,new MyRoleProvider().GetRolesForUser(id.Name));

                // Store roles
                ids.Add(header,new Principal(principal));

                return principal;
            }
        }            
    }

    protected void Application_AuthenticateRequest(object sender,EventArgs e)
    {
        // This is how we use our class
        var principal = MyRoles.GetRoles(Request.Headers["ceid"]);
    }

请注意,我的示例代码没有考虑存储GenericPrincipal实例列表所需的内存占用量.我的目标只是让您了解如何在不使用Session对象的情况下持久化(和过期)用户数据.

20分钟到期机制可以轻松链接到Session_End事件,以便在会话结束后(如果您正在使用InProc会话)它将使数据到期.

另请注意,与会话一样,此解决方案仅适用于单服务器环境.如果您具有负载平衡环境(2个或更多Web服务器),则必须将数据保留到数据库.

我希望这能够帮到你.如果没有,请告诉我原因,我会尽力帮助你:)