/// <summary>

/// 授权特性

/// </summary>

public class MyAuthorizeAttribute : AuthorizeAttribute

{

    string errcode = null;

    /// <summary>

    /// 授权核心

    /// </summary>

    /// <param name="httpContext"></param>

    /// <returns></returns>

    protected override bool AuthorizeCore(HttpContextBase httpContext)

    {

        var loginInfo = httpContext.Session["login"];

        if (loginInfo == null)

        {

            errcode = "NotLoggedIn";

            return false;

        }

        // 登录用户信息

        UserIdentity userIdentity = new UserIdentity((AdminInfo)loginInfo);

        httpContext.User = new UserPrincipal(userIdentity);

        return true;

    }

    /// <summary>

    /// 处理无权限请求

    /// </summary>

    /// <param name="filterContext"></param>

    protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext)

    {

        // 没有登录

        if (errcode == "NotLoggedIn")

        {

            if (filterContext.HttpContext.Request.IsAjaxRequest())

            {

                filterContext.HttpContext.Response.StatusCode = (int)HttpStatusCode.OK;

                filterContext.Result = new JsonResult

                {

                    ContentEncoding = System.Text.Encoding.UTF8,

                    ContentType = "application/json",

                    JsonRequestBehavior = JsonRequestBehavior.AllowGet,

                    Data = new { state = -, msg = "请重新登录" },

                };

            }

            else

            {

                filterContext.Result = new RedirectResult("/Account/Login");

            }

        }

        return;

    }

}