ASP.NET MVC 安全

本章我们将学习 ASP.NET MVC 开发模式下的安全处理

MVC 应用程序安全

Models 文件夹 包含表示应用程序模型的类

最新版的 Visual Studio 模板已经不会自动创建 AccountModels.cs 了

Visual Studio 自动创建 AccountModels.cs 文件，该文件包含用于应用程序认证的模型

AccountModels 包含

1. LogOnModel
2. ChangePasswordModel
3. RegisterModel

Change Password 模型

public class ChangePasswordModel
{

[Required]
[DataType(DataType.Password)]
[Display(Name = "Current password")]
public string OldPassword { get; set; }

[Required]
[StringLength(100, ErrorMessage = "The {0} must be at least {2} characters long.", 
MinimumLength = 6)]
[DataType(DataType.Password)]
[Display(Name = "New password")]
public string NewPassword { get; set; }

[DataType(DataType.Password)]
[Display(Name = "Confirm new password")]
[Compare("NewPassword", ErrorMessage = "The new password and confirmation password 
do not match.")]
public string ConfirmPassword { get; set; }

}

Logon 模型

public class LogOnModel
{

[Required]
[Display(Name = "User name")]
public string UserName { get; set; }

[Required]
[DataType(DataType.Password)]
[Display(Name = "Password")]
public string Password { get; set; }

[Display(Name = "Remember me?")]
public bool RememberMe { get; set; }

}

Register 模型

public class RegisterModel
{

[Required]
[Display(Name = "User name")]
public string UserName { get; set; }

[Required]
[DataType(DataType.EmailAddress)]
[Display(Name = "Email address")]
public string Email { get; set; }

[Required]
[StringLength(100, ErrorMessage = "The {0} must be at least {2} characters long.", 
MinimumLength = 6)]
[DataType(DataType.Password)]
[Display(Name = "Password")]
public string Password { get; set; }

[DataType(DataType.Password)]
[Display(Name = "Confirm password")]
[Compare("Password", ErrorMessage = "The password and confirmation password 
do not match.")]
public string ConfirmPassword { get; set; }

}