TinyFrame尾篇:整合Spring AOP实现用户认证

创建Manager用户验证表

这一篇主要讲解使用AOP对用户操作进行验证,如果通过验证,则继续执行,反之,则不能执行。其思想和上一篇完全一致。

由于需要用到用户认证,所以我们新建一个Manager实体类,并按照开篇中的方法做Mapper:

Manager实体类代码:

   1:   
   2:  namespace BookStore.Data.Entities
   3:  {
   4:      public class Manager
   5:      {
   6:          public int ID { get; set; }
   7:          public string UserName { get; set; }
   8:          public string PassWord { get; set; }
   9:      }
  10:  }

ManagerMapper代码:

   1:  using BookStore.Data.Entities;
   2:  using System.Data.Entity.ModelConfiguration;
   3:  using System.ComponentModel.DataAnnotations.Schema;
   4:   
   5:  namespace BookStore.Data.Mapper
   6:  {
   7:      public class ManagerMapper:EntityTypeConfiguration<Manager>
   8:      {
   9:          public ManagerMapper()
  10:          {
  11:              this.ToTable("Manager");
  12:   
  13:              this.HasKey(c => c.ID);
  14:              this.Property(c => c.ID).HasDatabaseGeneratedOption(DatabaseGeneratedOption.Identity);
  15:              this.Property(c => c.ID).IsRequired();
  16:   
  17:              this.Property(c => c.UserName).HasMaxLength(50).IsRequired();
  18:   
  19:              this.Property(c => c.PassWord).HasMaxLength(50).IsRequired();
  20:          }
  21:      }
  22:  }

将其放倒OnModelCreating方法中,用于向数据库中生成数据表:

   1:  modelBuilder.Configurations.Add(new ManagerMapper());

建立好以后,运行起来,我们就新增加了一个Manager数据表到数据库中。

AOP用户验证的实现

下面继续进行AOP用户验证的讲解。

首先,新建一个BookStore.BussinessLogic类库项目,并添加IBookOperation接口和BookOperation类,用于提供业务逻辑操作(注意,由于BookStore.Data只提供最基本的数据元操作,所以,业务逻辑部分最好重新组织一个新的模块建立,以便于后期维护方便)。

在IBookOperation接口中,加入如下定义:

   1:   
   2:  namespace BookStore.BussinessLogic
   3:  {
   4:      public interface IBookOperation
   5:      {
   6:          bool UserLogin(string userName, string passWord);
   7:      }
   8:  }

在BookOperation类中,加入如下实现:

   1:  using System.Linq;
   2:  using BookStore.Data;
   3:   
   4:  namespace BookStore.BussinessLogic
   5:  {
   6:      public class BookOperation:IBookOperation
   7:      {
   8:          public BookOperation()
   9:          {
  10:              this.context = new BookContext();
  11:          }
  12:   
  13:          private BookContext context;
  14:   
  15:          public bool UserLogin(string userName, string passWord)
  16:          {
  17:              var manager = (from p in context.Managers 
  18:                             where p.UserName == userName && p.PassWord == passWord 
  19:                             select p).FirstOrDefault();
  20:              if (manager != null) return true;
  21:              return false;
  22:          }
  23:      }
  24:  }

代码的具体意思我就不讲解了,就是从数据表中取出数据,和用户输入的用户名密码进行比对。

然后,在BookStore.AOP项目中,新建一个AuthAdvice类,继承自IAdvice接口,并提供实现方法:

   1:  using System;
   2:  using BookStore.BussinessLogic;
   3:   
   4:  namespace BookStore.AOP
   5:  {
   6:      public class AuthAdvice:IAdvice
   7:      {
   8:          public AuthAdvice()
   9:          {
  10:              Initializement();
  11:          }
  12:   
  13:          public void Initializement()
  14:          {
  15:              bookOperation = new BookOperation();
  16:              
  17:              log4net.Config.XmlConfigurator.Configure();
  18:              log = log4net.LogManager.GetLogger(typeof(LogAdvice));
  19:          }
  20:   
  21:          private IBookOperation bookOperation;
  22:          private log4net.ILog log;
  23:   
  24:          public void BeforeCall(AopAlliance.Intercept.IMethodInvocation invocation)
  25:          {
  26:              log.Info(string.Format("调用验证开始:{0}", invocation.Method.Name));
  27:          }
  28:   
  29:          public void AfterCall(AopAlliance.Intercept.IMethodInvocation invocation)
  30:          {
  31:              log.Info(string.Format("调用验证结束:{0}", invocation.Method.Name));
  32:          }
  33:   
  34:          public object Invoke(AopAlliance.Intercept.IMethodInvocation invocation)
  35:          {
  36:              try
  37:              {
  38:                  BeforeCall(invocation);
  39:                  bool flag = bookOperation.UserLogin("admin", "admin888");
  40:                  if (flag)
  41:                  {
  42:                      log.Info(string.Format("用户验证成功,开始执行函数..."));
  43:                      object resultObj = invocation.Proceed();
  44:                      return resultObj;
  45:                  }
  46:                  else
  47:                  {
  48:                      log.Error(string.Format("用户验证失败,准备退出执行..."));
  49:                      return null;
  50:                  }
  51:                  AfterCall(invocation);
  52:              }
  53:              catch (Exception ex)
  54:              {
  55:                  log.Error(string.Format("调用函数错误:{0},{1},{2}", invocation.Method.Name, ex.Message, ex.StackTrace));
  56:                  return null;
  57:              }
  58:          }
  59:   
  60:          public void Dispose()
  61:          {
  62:              throw new NotImplementedException();
  63:          }
  64:      }
  65:  }

上面的验证代码和上一篇没什么区别,但是请注意这段代码:bookOperation.UserLogin("admin", "admin888"),它是在函数执行之前,先从数据库进行用户名密码验证的,如果验证通过,执行函数,否则放弃执行,通过这样的方式,我们就能够实现用户验证了。

接下来就是去BookStore.RestService项目中配置web.cofig代码,使其运行:

   1:  <!--Spring Config Node-->
   2:    <spring>
   3:      <context>
   4:        <resource uri="config://spring/objects"/>
   5:      </context>
   6:      <objects xmlns="http://www.springframework.net">
   7:        <!--without aop-->
   8:        <object name="BookRepository" type="BookStore.Data.BookRepository, BookStore.Data" />
   9:        
  10:        <!--with aop-->
  11:        <object name="BookRepositoryAOP" type="Spring.Aop.Framework.ProxyFactoryObject" >
  12:          <property name="Target">
  13:            <object type="BookStore.Data.BookRepository, BookStore.Data" />
  14:          </property>
  15:          <property name="InterceptorNames">
  16:            <list>
  17:              <value>LogTraceAroundAdvice</value>
  18:              <value>AuthTraceAroundAdvice</value>
  19:            </list>
  20:          </property>
  21:        </object>
  22:        <!--Advices-->
  23:        <object id="LogTraceAroundAdvice" type="BookStore.AOP.LogAdvice, BookStore.AOP"></object>
  24:        <object id="AuthTraceAroundAdvice" type="BookStore.AOP.AuthAdvice, BookStore.AOP"></object>
  25:      </objects>
  26:    </spring>

最后来看看运行结果:

TinyFrame尾篇:整合Spring AOP实现用户认证

这样就达到了我们验证的目的了。

源码下载

最后这里附上源代码下载。

上一篇:python 下的数据结构与算法---2:大O符号与常用算法和数据结构的复杂度速查表


下一篇:Python开发工具PyCharm个性化设置