【发布时间】：2011-06-04 01:45:53
【问题描述】：
我有一个 mvc 3 应用程序，我正在使用我自己的登录视图来实现授权，该视图检查用户名和密码是否被允许，然后在会话中设置一个变量来表示用户已登录。这种的作品，但对于一个特定的观点，它的行为是一种奇怪的不受欢迎的方式。所述视图包含我用来输入一些数据和上传文件的表单。由于某种我无法弄清楚的原因，在发布此表单后，将启动一个新会话，因此记住用户已登录的变量被重置为 false，随后再次显示登录页面。
我不知道为什么应用程序此时开始一个新会话？我没有指示它这样做。谁能推荐解决方案来阻止这种行为并让它保持旧会话？
谢谢。
更新 - 一些代码：
请注意，在回复已发布的Create 表单后，会话似乎立即终止
CMS 控制器在所有操作上使用名为“RDAutorize”的自定义 Autorize 属性：
[RDAuthorize]
public class PhotoCMSController : Controller
{
public ActionResult Create()
{
/* Code omitted: set up a newPhoto object with default state */
/* Display view containing form to upload photo and set title etc. */
return View("../Views/PhotoCMS/Create", newPhoto);
}
[HttpPost]
public ContentResult Upload(int pPhotoId)
{
/* Code ommited: receive and store image file which was posted
via an iframe on the Create view */
string thumbnail = "<img src='/path/to/thumb.jpg' />";
return Content(thumbnail);
}
[HttpPost]
public ActionResult Create(string pPhotoTitle, string pCaption etc...)
{
/*Code omitted: receive the rest of the photo data and save
it along with a reference to the image file which was uploaded
previously via the Upload action above.*/
/* Display view showing list of all photo records created */
return View("../Views/PhotoCMS/Index", qAllPhotos.ToList<Photo>());
/* **Note: after this view is returned the Session_End() method fires in
the Global.asax.cs file i.e. this seems to be where the session is
being lost** */
}
}/*End of CMS Controller*/
自定义授权操作过滤器：
public class RDAuthorize : ActionFilterAttribute
{
public override void OnActionExecuting(ActionExecutingContext filterContext)
{
Boolean authorized = Convert.ToBoolean(
HttpContext.Current.Session["UserIsAuthorized"]
);
if (!authorized) {
/* Not logged in so send user to the login page */
filterContext.HttpContext.Response.Redirect("/Login/Login");
}
}
public override void OnActionExecuted(ActionExecutedContext filterContext) {}
public override void OnResultExecuting(ResultExecutingContext filterContext) {}
public override void OnResultExecuted(ResultExecutedContext filterContext) {}
}/*End of Authorize Action Filter*/
登录控制器：
public class LoginController : Controller
{
private PhotoDBContext _db = new PhotoDBContext();
public ActionResult Login()
{
string viewName = "";
Boolean authorized = Convert.ToBoolean(Session["UserIsAuthorized"]);
if (authorized)
{
viewName = "../Views/Index";
}
else
{
viewName = "../Views/Login/Login";
}
return View(viewName);
}
[HttpPost]
public ActionResult Login(string pUsername, string pPassword)
{
string viewName = "";
List<Photo> model = new List<Photo>();
var qUsers = from u in _db.Users
select u;
foreach (User user in qUsers.ToList<User>())
{
/* If authorized goto CMS pages */
if (pUsername == user.Username && pPassword == user.Password)
{
Session["UserIsAuthorized"] = true;
var qPhotos = from p in _db.Photos
where p.IsNew == false
select p;
model = qPhotos.ToList<Photo>();
viewName = "../Views/PhotoCMS/Index";
break;
}
}
return View(viewName, model);
}
}/* End of Login controller */
【问题讨论】：
-
很抱歉没有提前添加代码。我希望以上内容有用。
-
感谢这篇文章，我学会了如何使用授权。
标签： asp.net session asp.net-mvc-3