服务端：WCF服务层安全检查核心类

淡淡的烟草味﹌ 2023-06-01 03:30 12阅读 0赞

using System.Data;
    using CSFrameworkV4_5.Common;
    using CSFrameworkV4_5.Core.SystemSecurity;
    using CSFrameworkV4_5.Models;
    using CSFrameworkV4_5.Server.DataAccess.DAL_Permission;
    
    namespace CSFrameworkV4_5.WCFContract
    {
        /// <summary>
        ///服务端：WCF服务层安全检查核心类
        /// </summary>
        public static class WebSecurity
        {
            /// <summary>
            /// 检查客户端恶意访问后台
            /// </summary>
            private static bool _AttackValidation = false;
    
            /// <summary>
            /// 是否检查客户端恶意攻击
            /// </summary>
            public static bool AttackValidation
            {
                get { return _AttackValidation; }
                set { _AttackValidation = value; }
            }
    
            /// <summary>
            /// 用户登录的验证码,防止用户恶意攻击Login接口.
            /// </summary>
            /// <param name="identity">验证码</param>
            /// <returns></returns>
            public static bool ValidateLoginIdentity(byte[] identity)
            {
                //是否连续攻击
                if (WebSecurity.AttackValidation) AttackRecorder.IsAttack();
    
                bool isIdentity = WebServiceSecurity.ValidateLoginIdentity(identity);
                return isIdentity;
            }
    
            public static Loginer ValidateLoginer(byte[] loginTicket)
            {
                //是否连续攻击
                if (WebSecurity.AttackValidation) AttackRecorder.IsAttack();
    
                //加密令牌解析成功
                Loginer user = WebServiceSecurity.ValidateLoginer(loginTicket);
    
                //检查用户名及密码
                if (!ActivityUserCache.ValidateUser(user.Account, user.Password))
                    throw new CustomException("用户名或密码不正确！");
    
                return user;
            }
    
            /// <summary>
            /// 检查用户登录凭证，并且检查两次访问时间
            /// </summary>
            /// <param name="loginer">用户登录凭证</param>
            /// <param name="checkAttack">检查连续调用方法攻击</param>
            /// <returns></returns>
            public static Loginer ValidateLoginer(byte[] loginTicket, bool checkAttack)
            {
                if (checkAttack) AttackRecorder.IsAttack();
    
                //加密令牌解析成功
                Loginer user = WebServiceSecurity.ValidateLoginer(loginTicket);
    
                //检查用户名及密码
                if (!ActivityUserCache.ValidateUser(user.Account, user.Password))
                    throw new CustomException("用户名或密码不正确！");
    
                return user;
            }
    
        }
    
    
    }

转载于:https://www.cnblogs.com/Jeely/p/11350266.html