asp.net-mvc – 死简单的ASP.NET MVC 5密码保护？

public class BasicAuthenticationAttribute : ActionFilterAttribute
    {
        public string BasicRealm { get; set; }
        protected string Username { get; set; }
        protected string Password { get; set; }

        public BasicAuthenticationAttribute(string username,string password)
        {
            this.Username = username;
            this.Password = password;
        }

        public override void OnActionExecuting(ActionExecutingContext filterContext)
        {
            var req = filterContext.HttpContext.Request;
            var auth = req.Headers["Authorization"];
            if (!String.IsNullOrEmpty(auth))
            {
                var cred = System.Text.ASCIIEncoding.ASCII.GetString(Convert.FromBase64String(auth.Substring(6))).Split(':');
                var user = new { Name = cred[0],Pass = cred[1] };
                if (user.Name == Username && user.Pass == Password) return;
            }
            var res = filterContext.HttpContext.Response;
            res.StatusCode = 401;
            res.AddHeader("WWW-Authenticate",String.Format("Basic realm="{0}"",BasicRealm ?? "Ryadel"));
            res.End();
        }
    }

然后,您可以使用属性保护操作,控制器：

[BasicAuthenticationAttribute("your-username","your-password",BasicRealm = "your-realm")]
public class HomeController : BaseController
{
   ...
}

要保护整个网站,请将此过滤器添加到全局过滤器：

protected void Application_Start()
{
    ...
    GlobalFilters.Filters.Add(new BasicAuthenticationAttribute("your-username","your-password"));
    ...
}