#region
|
|
using CSFrameworkV5.Common;
|
using CSFrameworkV5.Core;
|
using CSFrameworkV5.Core.SystemSecurity;
|
|
#endregion
|
|
namespace CSFrameworkV5.WCFContract
|
{
|
/// <summary>
|
/// 服务端：WCF服务层安全检查核心类
|
/// </summary>
|
public static class WebSecurity
|
{
|
/// <summary>
|
/// 检查客户端恶意访问后台
|
/// </summary>
|
private static bool _AttackValidation;
|
|
/// <summary>
|
/// 是否检查客户端恶意攻击
|
/// </summary>
|
public static bool AttackValidation
|
{
|
get => _AttackValidation;
|
set => _AttackValidation = value;
|
}
|
|
public static Loginer ValidateLoginer(byte[] loginTicket)
|
{
|
//是否连续攻击
|
if (AttackValidation) AttackRecorder.IsAttack();
|
|
//加密令牌解析成功
|
var user = WebServiceSecurity.ValidateLoginer(loginTicket);
|
|
//检查用户名及密码
|
if (!ActivityUserCache.ValidateUser(user.Account, user.Password))
|
throw new CustomException("用户名或密码不正确！");
|
|
return user;
|
}
|
|
/// <summary>
|
/// 检查用户登录凭证，并且检查两次访问时间
|
/// </summary>
|
/// <param name="loginer">用户登录凭证</param>
|
/// <param name="checkAttack">检查连续调用方法攻击</param>
|
/// <returns></returns>
|
public static Loginer ValidateLoginer(byte[] loginTicket,
|
bool checkAttack)
|
{
|
if (checkAttack) AttackRecorder.IsAttack();
|
|
//加密令牌解析成功
|
var user = WebServiceSecurity.ValidateLoginer(loginTicket);
|
|
//检查用户名及密码
|
if (!ActivityUserCache.ValidateUser(user.Account, user.Password))
|
throw new CustomException("用户名或密码不正确！");
|
|
return user;
|
}
|
|
/// <summary>
|
/// 用户登录的验证码,防止用户恶意攻击Login接口.
|
/// </summary>
|
/// <param name="identity">验证码</param>
|
/// <returns></returns>
|
public static bool ValidateLoginIdentity(byte[] identity)
|
{
|
//是否连续攻击
|
if (AttackValidation) AttackRecorder.IsAttack();
|
|
var isIdentity = WebServiceSecurity.ValidateLoginIdentity(identity);
|
return isIdentity;
|
}
|
}
|
}
|
