MVC身份验证机制

namespace BCPayWeb.Core
{
    public class UserLoginAttribute : AuthorizeAttribute
    {
        protected override bool AuthorizeCore(HttpContextBase httpContext)
        {
            // httpContext.Session["User"] = new Users() { Id = 1, RoleId = 1 };

            if (httpContext.Session["User"] == null)
            {
                httpContext.Response.StatusCode = 401;
                return false;
            }


            base.AuthorizeCore(httpContext);

            return true;
        }

        public override void OnAuthorization(System.Web.Mvc.AuthorizationContext filterContext)
        {

            try
            {
                string controllerName = filterContext.ActionDescriptor.ControllerDescriptor.ControllerName;
                string actionName = filterContext.ActionDescriptor.ActionName;


                if (filterContext.HttpContext.Session["User"] == null)
                {
                    if (controllerName.ToLower() != "users")
                    {
                        if (filterContext.HttpContext.Request.IsAjaxRequest())
                        {

                            throw new Exception("登录超时,请重新登录。");
                        }

                        string url = filterContext.HttpContext.Request.RawUrl;
                        if (url.Length < 4 || url.Contains("Excel") || url.Contains("excel"))
                        {
                            BCPayWebDataContext db = new BCPayWebDataContext();
                            url = "/Pay/Phone?mid=2";
                        }
                        filterContext.Result = new RedirectResult(string.Format("/Users/Login?returnUrl={0}", HttpUtility.UrlEncode(url)));
                        return;
                    }
                }

                if (controllerName.ToLower() != "menu")
                {
                    BCPayWebDataContext db = new BCPayWebDataContext();
                    var user = filterContext.HttpContext.Session["User"] as SerializableUser;

                    var query = from q in db.RoleMenu
                                where q.RoleId == user.RoleId && q.Menu.Url.ToLower() == string.Format("/{0}/{1}", controllerName, actionName).ToLower()
                                select q;

                    if (query.Count() < 1)
                    {
                        throw new Exception("您没有权限访问此页面。");
                    }
                }


                filterContext.HttpContext.Session["Error"] = null;

                base.OnAuthorization(filterContext);
            }
            catch (Exception ex)
            {
                try
                {

                    filterContext.HttpContext.Session["Error"] = ex.Message;
                    filterContext.HttpContext.Response.Write(ex.Message);
                    filterContext.HttpContext.Response.End();
                    filterContext.Result = new RedirectResult("/Users/Login");
                }
                catch (Exception)
                {
                }
            }

        }

        protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext)
        {

            if (filterContext.HttpContext.Request.IsAjaxRequest())
            {
            }
            else
            {
                string url = filterContext.HttpContext.Request.RawUrl;
                if (url.Length < 4)
                {
                    url = "/Pay/Phone?mid=2";
                }
                filterContext.Result = new RedirectResult(string.Format("/Users/Login?returnUrl={0}", HttpUtility.UrlEncode(url)));
            }
        }
    }
}

引用时 只需在acticon或方法名上上加入

[UserLoginAttribute]即可

 [UserLoginAttribute]
    public class MenuController : Controller
    {
        //左侧导航
        // GET: /Menu/
        public PartialViewResult Index()
        {
            var user = Session["User"] as SerializableUser;
            if (user != null)
            {
                BCPayWebDataContext db = new BCPayWebDataContext();

                var query = from q in db.RoleMenu
                            where q.RoleId == user.RoleId && q.Menu.IsShow == 1
                            orderby q.Menu.Id ascending
                            select new MyMenu
                            {
                                Id = q.Menu.Id,
                                ParentId = q.Menu.ParentId,
                                Tip = q.Menu.Tip,
                                Title = q.Menu.Title,
                                Type = q.Menu.Type,
                                Url = q.Menu.Url,
                                Sort = q.Menu.Sort,
                            };

                var lst = query.ToList();

                lst.Sort(SortMenuCompare);

                return PartialView(lst);
            }


            return PartialView();
        }


        private static int SortMenuCompare(MyMenu m1, MyMenu m2)
        {
            return m1.Sort.CompareTo(m2.Sort);
        }

    }