CSFramework.WebapiV3(.NET7/NetCore) 系统安全及Token令牌介绍|C/S开发框架
作者:csframework|C/S框架网  发布日期:2024/10/20 11:56:49

CSFramework.WebapiV3(.NET7/NetCore) 系统安全及Token令牌介绍|C/S开发框架

CSFramework.WebapiV3(.NET7/NetCore) 系统安全及Token令牌介绍

1、GateController - 门禁控制器

CSFramework.WebapiV3(.NET7/NetCore) 系统安全及Token令牌介绍|C/S开发框架

GateController也可称为系统安全控制器,提供系统登录、登出、刷新令牌接口服务。

GateController提供6个接口:

名称返回类型接口说明
1LoginTask<ModelUser>C/S框架登录接口,CSFrameworkV6_System.tb_MyUser表用户认证
2LogoutTask<Boolean>C/S框架登出接口
3RefreshTokenTask<res_Token>C/S框架刷新令牌
4LoginAPPTask<Api_User>WebApi框架登录接口,CSFramework_WebAPI_V3.Api_User表用户认证
5LogoutAPPTask<Boolean>WebApi框架登出接口
6RefreshTokenAPPTask<res_Token>WebApi框架刷新令牌

2、保存Token及刷新Token

用户登录或调用刷新令牌接口,系统自动生成一个全局令牌(JWT Token)序列,并存储到数据表。

CS框架系统数据库:tb_MyUser表Token字段设置为 varchar(1000) 长度

WebApi框架数据库:Api_User表Token字段设置为 varchar(1000) 长度

3、设置Jwt Token过期

JwtToken不能直接设置过期。

如果你想要强制所有用户的Token过期时,你可以在数据库中设置一个标志,当用户登录时检查这个标志,如果标志被设置,则不允许操作接口。

4、C/S客户端调用WebApi接口

首先要登录WebApi获取Token,调用Login或LoginAPP接口,存储到Loginer.CurrentUser.Token属性。

C# 全选
//调用Login或LoginAPP接口登录。
var webApiUser=LoginWebApi();
Loginer.CurrentUser.Token = webApiUser.Token;

5、Api接口测试报告

Login - 模拟C/S框架用户登录

请求:

C# 全选
{
    "validationTicket": "#ZuBaSz+G$*FGs2+a/z3aDd3aGqo0F34f160$^",
    "LoginUser": {
        "Account": "admin",
        "Password": "Snj6+Q3dGGb1ukbEi0igFw==",
        "DBID": "Normal",
        "IP": "127.0.0.1",
        "MAC": "10-FF-84-46-04-62",
        "LoginAuthType": "LocalSystemAuth",
        "LoginTime": "2024-05-25T18:31:48.703367+08:00",
        "ClientVersion": "YourProject V6.0/Android 6.12",
        "DeviceMID": "移动端设备MID",
        "DeviceType": "Android"
    },
    "Language": "zh_cn",
    "PublicKey": "",
    "AppId": "csframework"
}

返回:

JSON 全选
{
    "Data": {
        "TS": "0001-01-01 00:00:00",
        "Account": "admin",
        "NovllAccount": null,
        "DomainDd": null,
        "DomainName": null,
        "UserName": "超级用户",
        "Address": null,
        "Tel": "13899882288",
        "Email": "13899882288@163.com",
        "Password": "Snj6+Q3dGGb1ukbEi0igFw==",
        "LastLoginTime": "2024-05-31 17:27:16",
        "LastLogoutTime": "2024-05-30 22:59:56",
        "IsLocked": "N",
        "CreateTime": "0001-01-01 00:00:00",
        "FlagAdmin": "Y",
        "Flagonline": "Y",
        "Logincounter": 12735,
        "Datasets": ",Normal,QiangSheng,DongLian,Normal1",
        "WorkerID": "13899882288",
        "Org1": "ND",
        "Org2": "201",
        "Token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOiJhZG1pbiIsInVzZXJOYW1lIjoi6LaF57qn55So5oi3IiwicHVibGljS2V5IjoiIiwiYXBwSWQiOiJjc2ZyYW1ld29yayIsImxhbmd1YWdlIjoiemhfY24iLCJkYmlkIjoiTm9ybWFsIiwibmJmIjoxNzE3MTQ3NjM2LCJleHAiOjE4MDM1NDc2MzYsImlzcyI6Ind3dy5jc2ZyYW1ld29yay5jb20iLCJhdWQiOiJXZWJBcGkoTkVUQ29yZSkifQ.KLgpv5eGpsqumPFuNVoDCJsP03IpEl-82Ll4mm63OVA",
        "Phone": "13899882288"
    },
    "Success": true,
    "ErrorCode": 0,
    "Message": "请求成功(Request Successfully)!"
}

LoginAPP - 模拟WebApi框架用户登录

请求:

C# 全选
{
    "validationTicket": "#ZuBaSz+G$*FGs2+a/z3aDd3aGqo0F34f160$^",
    "LoginUser": {
        "Account": "13888888888",
        "Password": "e10adc3949ba59abbe56e057f20f883e",
        "DBID": "Normal",       
        "IP": "127.0.0.1",
        "MAC": "10-FF-84-46-04-62",
        "LoginTime": "2024-05-25T18:31:48.703367+08:00",
        "ClientVersion": "YourProject V6.0/Android 6.12",
        "DeviceMID": "移动端设备MID",
        "DeviceType": "Android"
    },
    "Language": "zh_cn",
    "PublicKey": "",
    "AppId": "csframework"
}

返回:

JSON 全选
{
    "Data": {
        "RowID": "10112",
        "Account": "admin",
        "Password": "e10adc3949ba59abbe56e057f20f883e",
        "UserName": "管理员",
        "UserType": 1,
        "UserLevel": 1,
        "UID": "567",
        "Phone": "13888888888",
        "Status": 1,
        "LoginCount": 406,
        "FlagLock": "N",
        "MIDMobile": "345",
        "DeviceType": "3",
        "DeviceOSVersion": "3",
        "RegisterTime": "2022-12-01 14:26:32",
        "LastUpdateDate": "2022-12-01 14:26:32",
        "TokenExpires": 60480,
        "Token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOiJhZG1pbiIsInVzZXJOYW1lIjoi566h55CG5ZGYIiwicHVibGljS2V5IjoiIiwiYXBwSWQiOiJjc2ZyYW1ld29yayIsImxhbmd1YWdlIjoiemhfY24iLCJkYmlkIjoiTm9ybWFsIiwibmJmIjoxNzE3MTQ3Nzk1LCJleHAiOjE4MDM1NDc3OTUsImlzcyI6Ind3dy5jc2ZyYW1ld29yay5jb20iLCJhdWQiOiJXZWJBcGkoTkVUQ29yZSkifQ.Zsg6qCpsPm_BGzaDfp_8j8Jjl3efQgCPzCMuidTqArc",
        "LastLoginTime": "2024-05-31 17:29:55",
        "Permissions": "[{\"name\":\"成品入库\",\"actions\":127},{\"name\":\"纸板库存查询\",\"actions\":127},{\"name\":\"纸箱库存查询\",\"actions\":127},{\"name\":\"辅料库存查询\",\"actions\":127},{\"name\":\"收款查询\",\"actions\":127},{\"name\":\"付款查询\",\"actions\":127},{\"name\":\"纸箱送货明细\",\"actions\":127},{\"name\":\"订单汇总\",\"actions\":127},{\"name\":\"订单未入库表\",\"actions\":127},{\"name\":\"订单未采购表\",\"actions\":127},{\"name\":\"纸箱送货汇总\",\"actions\":127},{\"name\":\"成品出库\",\"actions\":127},{\"name\":\"订单汇总\",\"actions\":127},{\"name\":\"订单未入库表\",\"actions\":127},{\"name\":\"订单未采购表\",\"actions\":127},{\"name\":\"订单未交货\",\"actions\":127},{\"name\":\"采购明细\",\"actions\":127},{\"name\":\"采购汇总\",\"actions\":127},{\"name\":\"采购未交明细\",\"actions\":127},{\"name\":\"采购未领料明细\",\"actions\":127},{\"name\":null,\"actions\":127},{\"name\":null,\"actions\":127},{\"name\":\"纸板入库\",\"actions\":127},{\"name\":\"纸板出库\",\"actions\":127},{\"name\":\"产量登记\",\"actions\":127},{\"name\":\"销售报价\",\"actions\":127},{\"name\":\"订单明细查询\",\"actions\":127},{\"name\":\"客户查询\",\"actions\":127},{\"name\":\"供应商查询\",\"actions\":127}]"
    },
    "Success": true,
    "ErrorCode": 0,
    "Message": "请求成功(Request Successfully)!"
}

RefreshToken - 刷新令牌(C/S框架用户)

请求:

C# 全选
{
        "UserId": "admin",
        "Password": "Snj6+Q3dGGb1ukbEi0igFw=="
}

返回:

JSON 全选
{
    "Data": {
        "Token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOiJhZG1pbiIsInVzZXJOYW1lIjoi6LaF57qn55So5oi3IiwicHVibGljS2V5IjoiIiwiYXBwSWQiOiIiLCJsYW5ndWFnZSI6IiIsImRiaWQiOiIiLCJuYmYiOjE3MTcxNDcyMjUsImV4cCI6MTgwMzU0NzIyNSwiaXNzIjoid3d3LmNzZnJhbWV3b3JrLmNvbSIsImF1ZCI6IldlYkFwaShORVRDb3JlKSJ9.Az15LDq6B9uWi7JWsdXifbeF027jqMlQ4O0Gd_9R5WU",
        "Time": "2024-05-31 17:20:27"
    },
    "Success": true,
    "ErrorCode": 0,
    "Message": "请求成功(Request Successfully)!"
}

RefreshTokenAPP - 刷新令牌(WebApi框架用户)

请求:

C# 全选
{
        "UserId": "13888888888",
        "Password": "e10adc3949ba59abbe56e057f20f883e"
}

返回:

JSON 全选
{
    "Data": {
        "Token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOiJhZG1pbiIsInVzZXJOYW1lIjoi566h55CG5ZGYIiwicHVibGljS2V5IjoiIiwiYXBwSWQiOiIiLCJsYW5ndWFnZSI6IiIsImRiaWQiOiIiLCJuYmYiOjE3MTcxNDY5OTIsImV4cCI6MTgwMzU0Njk5MiwiaXNzIjoid3d3LmNzZnJhbWV3b3JrLmNvbSIsImF1ZCI6IldlYkFwaShORVRDb3JlKSJ9.FwOpuO8XfLPAP82LEtSuiHwYdQUjSkjtQucu3TBeVYo",
        "Time": "2024-05-31 17:16:37"
    },
    "Success": true,
    "ErrorCode": 0,
    "Message": "请求成功(Request Successfully)!"
}

Logout - 登出(C/S框架用户)

请求:

C# 全选
{
    "Account": "admin",
    "Password": "Snj6+Q3dGGb1ukbEi0igFw=="
}

返回:

JSON 全选
{
    "Data": true,
    "Success": true,
    "ErrorCode": 0,
    "Message": "请求成功(Request Successfully)!"
}

LogoutAPP - 登出(WebApi框架用户)

请求:

C# 全选
{  
    "Account": "13888888888",
    "Password": "e10adc3949ba59abbe56e057f20f883e"
}

返回:

JSON 全选
{
    "Data": true,
    "Success": true,
    "ErrorCode": 0,
    "Message": "请求成功(Request Successfully)!"
}
C/S框架网|原创精神.创造价值.打造精品


扫一扫加作者微信
C/S框架网作者微信 C/S框架网|原创作品.质量保障.竭诚为您服务
上一篇 下一篇