2013-02-02 31 views
2

我试图重定向用户只有当用户登录到不同的页面。我使用HTTPHandler来拦截此请求并重定向。用户登录后,控件不会返回到此HTTPHandler。任何意见或建议,httphandler无法正常工作

namespace NES.HiLo.Security 
{ 
    public class PallativeAuthenticationHandler : IHttpHandler, IRequiresSessionState 
    { 
     /// <summary> 
     /// You will need to configure this handler in the web.config file of your 
     /// web and register it with IIS before being able to use it. For more information 
     /// see the following link: http://go.microsoft.com/?linkid=8101007 
     /// </summary> 


     public bool IsReusable 
     { 
     // Return false in case your Managed Handler cannot be reused for another request. 
     // Usually this would be false in case you have some state information preserved per request. 
     get { return false; } 
    } 

    public void ProcessRequest(HttpContext context) 
    { 

     string UserName = ""; 
     int TSecUserID = 0; 

     HttpContext context2 = HttpContext.Current; 

     if (string.IsNullOrEmpty(context2.User.Identity.Name)) 
      UserName = "UNKNOWN"; 
     else 
      UserName = context2.User.Identity.Name.ToString(); 

     if (UserName != "UNKNOWN") 
     { 

      string connectionString = System.Configuration.ConfigurationManager.ConnectionStrings["NES.HiLo.Data.Properties.Settings.HiLoConnectionString"].ConnectionString; 
      using (SqlConnection connection = new SqlConnection(connectionString)) 
      { 

       connection.Open(); 
       SqlCommand command = new SqlCommand("Select tSec_UserId from dbo.HiLoUser where Username='" + HttpContext.Current.User.Identity.Name.ToString() + "'", connection); 


       TSecUserID = (Int32)command.ExecuteScalar(); 
       connection.Close(); 
       HttpContext.Current.Response.Redirect("http://www.google.com?retUrl=" + TSecUserID); 

      } 

     } 
     else 
     { 
      HttpContext.Current.Response.Redirect("~/Login.aspx?retUrl=" + HttpUtility.UrlEncode(context2.Request.Url.ToString())); 

     } 



    } 
} 

Httphanlder在web.config中的条目

<httpHandlers> 
     <!--<add path="*.pdf" type="HttpSecurity.HttpHandlerAuthentication, HttpSecurity" verb="*"/>--> 

     <!--<add verb="GET" path="/calderdale/*/*.pdf" type="NES.HiLo.Security.CalderDaleAuthenticationHandler, NES.HiLo.Security" />--> 
     <add verb="*" path="/calderdale/*.pdf" type="NES.HiLo.Security.CalderDaleAuthenticationHandler, NES.HiLo.Security" /> 
     <remove verb="*" path="*.asmx" /> 
     <!-- ASPNETAJAX --> 
     <add verb="*" path="*.asmx" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=1.0.61025.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" /> 
     <add verb="*" path="*_AppService.axd" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=1.0.61025.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" /> 
     <add verb="GET,HEAD" path="ScriptResource.axd" type="System.Web.Handlers.ScriptResourceHandler, System.Web.Extensions, Version=1.0.61025.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" validate="false" /> 
     <!-- UMBRACO CHANNELS --> 
     <add verb="*" path="umbraco/channels.aspx" type="umbraco.presentation.channels.api, umbraco" /> 
     <add verb="*" path="umbraco/channels/word.aspx" type="umbraco.presentation.channels.wordApi, umbraco" /> 
     <add verb="*" path="umbraco/clt/ajaxCommunityAdministrators.aspx" type="NES.HiLo.UserControls.DataTypes.AjaxCommunityAdministrators, NES.HiLo" /> 
     <!-- ELMAH --> 
     <add verb="POST,GET,HEAD" path="elmah.axd" type="Elmah.ErrorLogPageFactory, Elmah" /> 
     <!-- WIDGET AJAX HANDLER --> 
     <add verb="*" path="umbraco/WidgetLibrary/WidgetAjaxHandler.aspx" type="NES.WidgetLibrary.WidgetAjaxHandler" /> 
     <add verb="GET" path="umbraco/WidgetLibrary/SubjectSelectorAjaxHandler.aspx" type="NES.WidgetLibrary.MetaDataControls.ChildControls.SubjectSelectorControl.AjaxSelector" /> 
     <add verb="*" path="/FilterByDevice.ashx" type="NES.HiLo.Web.Handlers.DeviceFilterHandler" /> 
     <add verb="GET" path="/Pallative/*.xml" type="NES.HiLo.Security.PallativeAuthenticationHandler, NES.HiLo.Security" /> 
    </httpHandlers> 




<authentication mode="Forms"> 
     <forms name="KFCSAUTH" loginUrl="login.aspx" protection="All" slidingExpiration="true" path="/" domain=".scot.nhs.uk" /> 
    </authentication> 
    <authorization> 
     <allow users="?" /> 
    </authorization> 

<system.webServer> 
    <!--<validation validateIntegratedModeConfiguration="false" />--> 
    <handlers> 
     <add name="Pallative Handler" path="/Pallative/*.xml" verb="GET" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll" resourceType="Unspecified" requireAccess="Script" preCondition="classicMode,runtimeVersionv2.0,bitness32" /> 
     <add name="Calderdale Handler" path="/calderdale/*.pdf" verb="GET" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll" resourceType="Unspecified" requireAccess="Script" preCondition="classicMode,runtimeVersionv2.0,bitness32" /> 
     <!--<add name="Pallative Handler" path="Pallative/pallative_doc.html" verb="GET" modules="IsapiModule" scriptProcessor="%windir%\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll" resourceType="Unspecified" requireAccess="Script" preCondition="classicMode,runtimeVersionv2.0,bitness32" />--> 
    </handlers> 
    <!--<handlers accessPolicy="Read, Write, Script, Execute"> 
     --> 
    <!--<add name="PictHandler" preCondition="integratedMode" verb="*" path="*.pictx" type="PictHttpHandler,PictHandler"/>--> 
    <!-- 
     <add name="Pdfhandler" verb="*" path="/calderdale/*.html" type="NES.HiLo.Security.CalderDaleAuthenticationHandler, NES.HiLo.Security" preCondition="integratedMode" /> 
    </handlers>--> 

</system.webServer> 
+0

你能发布配置这个处理程序的'web.config'部分吗? –

+0

web.config这个应用程序是相当大的。如果这有什么好处,我可以复制其中的一部分。我已经发布了上面的一些相关部分,并通过我使用IIS 7.5的方式 – rumi

+0

那么,这个处理程序的类名是什么? –

回答

1

你所面临的问题有事情做与事实验证Cookie只对指定的域是有效的:

<forms name="KFCSAUTH" 
    loginUrl="login.aspx" 
    protection="All" 
    slidingExpiration="true" 
    path="/" 
    domain=".scot.nhs.uk" /> 

也许只有当您在某个其他域中运行Web应用程序时才会出现此问题。尝试删除domain属性并查看问题是否仍然存在。

+0

我已经创建了另一个按预期工作的httphandler来拦截对pdf文件的任何请求。使用类似的web.config条目 – rumi