WebAPI学习笔记(1)实现Basic Auth基本授权验证
1、Http基本认证只需要添加新的认证过滤属性。该属性类继承自 System.Web.Http.AuthorizeAttribute,在 IsAuthorized(...)方法中读取Http 头部Authorization字段及其值,进行自定义验证。 1 public class HttpBasicAuthAttribute : System.Web.Http.AuthorizeAttribute 2 { 3 public override void OnAuthorization(System.Web.Http.Controllers.HttpActionContext actionContext) 4 { 5 //从http请求的头里面获取身份验证信息,验证是否是请求发起方的ticket 6 var authorization = actionContext.Request.Headers.Authorization; 7 if ((authorization != null) && (authorization.Parameter != null)) 8 { 9 //解密用户ticket,并校验用户名密码是否匹配 10 var encryptTicket = authorization.Parameter; 11 if (ValidateTicket