WebAPI身份验证

对WebAPI接口的开放当然要做控制，需要身份验证如何做到呢、

进行身份验证后的

服务器拒绝了访问！

第一步添加一个CustomHandler.cs的类

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Threading.Tasks;
using System.Net.Http;
using System.Text;
using System.Net;

namespace MvcApplication1.Handler
{
    public class customHandler : DelegatingHandler
    {
        protected override System.Threading.Tasks.Task<HttpResponseMessage> SendAsync(HttpRequestMessage request, System.Threading.CancellationToken cancellationToken)
        {
            int matchHeaderCount = request.Headers.Count((item) =>
            {
                if ("key".Equals(item.Key))
                {
                    foreach (var str in item.Value)
                    {
                        if ("11234".Equals(str))
                        {
                            return true;
                        }
                    }
                }
                return false;
            });
            if (matchHeaderCount > 0)
            {
                return base.SendAsync(request, cancellationToken);
            }
            return Task.Factory.StartNew<HttpResponseMessage>(() => { return new HttpResponseMessage(HttpStatusCode.Forbidden); });
        }
    }
}

第二步部署一下就ok了

   1:  using System;

   2:  using System.Collections.Generic;

   3:  using System.Linq;

   4:  using System.Web;

   5:  using System.Web.Http;

   6:  using System.Web.Mvc;

   7:  using System.Web.Optimization;

   8:  using System.Web.Routing;

   9:  using MvcApplication1.Handler;

  10:   

  11:  namespace MvcApplication1

  12:  {

  13:      // 注意: 有关启用 IIS6 或 IIS7 经典模式的说明，

  14:      // 请访问 http://go.microsoft.com/?LinkId=9394801

  15:   

  16:      public class WebApiApplication : System.Web.HttpApplication

  17:      {

  18:          protected void Application_Start()

  19:          {

  20:              AreaRegistration.RegisterAllAreas();

  21:   

  22:              WebApiConfig.Register(GlobalConfiguration.Configuration);

  23:              FilterConfig.RegisterGlobalFilters(GlobalFilters.Filters);

  24:              RouteConfig.RegisterRoutes(RouteTable.Routes);

  25:              BundleConfig.RegisterBundles(BundleTable.Bundles);

  26:              

GlobalConfiguration.Configuration.MessageHandlers.Add(new customHandler());

  27:          }

  28:      }

  29:  }

添加最后一行就ok了。

客户端访问也只要在

request的Headers添加验证信息就可以了，当然android客户端具体怎么访问还在学习中。