bu不是通过spring mvc来设置的吗

@低头、深拥: java不熟。

但模式是一样的（名字后来都差不多了）。用filter这类拦截器的东西，通过代码控制即可实现。

@花飘水流兮: 有相关的代码吗？谢谢

@低头、深拥:虽然不喜欢动不动要代码的人——，给你一个曾经的，代码问题里面的一概不回答。

public class LAuthenticateAttribute : FilterAttribute, IAuthenticationFilter
{
//private const string LoginPage = "~/Account/Index";
private const string MainPage = "~/Account/Home";
private bool IsLogin { get; } = false;
private RoleCatelog Role { get; }
public LAuthenticateAttribute(RoleCatelog role =RoleCatelog.All, bool isLoginPage = false)
{
Role = role;
IsLogin = isLoginPage;
}

public void OnAuthentication(AuthenticationContext filterContext)
{
if (IsLogin) //No need role check.
{
if (SessionData.Account != null)
{
filterContext.Result = new RedirectResult(MainPage);
return;
}

var userFromClient = filterContext.RequestContext.HttpContext.Request["user"];
var pwdFromClient = filterContext.RequestContext.HttpContext.Request["pwd"];
if (string.IsNullOrEmpty(userFromClient)) { filterContext.Result = new ViewResult { ViewName = "Index", ViewData = new ViewDataDictionary { { "ErrorMsg", "请输入账号。" } }, ViewEngineCollection = ViewEngines.Engines }; return; }
if (string.IsNullOrEmpty(pwdFromClient)) { filterContext.Result = new ViewResult { ViewName = "Index", ViewData = new ViewDataDictionary { { "ErrorMsg", "请输入密码。" } }, ViewEngineCollection = ViewEngines.Engines }; return; }

var db = new G5ManagerCenterEntities();
var account = db.Accounts.FirstOrDefault(t => t.LoginName == userFromClient && t.LoginPwd == pwdFromClient);

if (account != null)
{
SessionData.Account = account;
var identity = new GenericIdentity(account.LoginName);
filterContext.Principal = new LPrincipal(identity, account);
filterContext.Result = new RedirectResult(MainPage);
return;
}
else
{
filterContext.Result = new ViewResult{ ViewName = "Index",ViewData= new ViewDataDictionary{{ "ErrorMsg", "账号不正确。" } }, ViewEngineCollection = ViewEngines.Engines };
//filterContext.Result = new RedirectResult(LoginPage);
return;
}
}
else//uri on resource.
{
if (SessionData.Account != null)
{
var account = SessionData.Account;
var accourntRole = (uint) account.Role;
var currentApiRole = (uint) Role;
if((accourntRole & currentApiRole) != accourntRole)
{
//告知，409
filterContext.Result = new HttpUnauthorizedResult("The Role can't access the uri.");
return;
}
var identity = new GenericIdentity(account.LoginName);
filterContext.Principal = new LPrincipal(identity, account);
return;
}
else
{
filterContext.RouteData.Values["controller"] = "Account";
filterContext.Result = new ViewResult { ViewName = "Index", ViewData = new ViewDataDictionary { { "ErrorMsg", "登录过期，请重新登陆。" } }, ViewEngineCollection = ViewEngines.Engines };
//filterContext.Result = new RedirectResult(LoginPage);
return;
}
}
}

public void OnAuthenticationChallenge(AuthenticationChallengeContext filterContext)
{
var currentUser = filterContext.HttpContext.User.GetAccount();
if (currentUser != null)
{
if (filterContext.Controller is Roots_LogOperatorController)return;
var result = filterContext.Result;
var uri = filterContext.HttpContext.Request.CurrentExecutionFilePath;
if (filterContext.Controller is IEntityController && uri.EndsWith("/Edit")) uri = $"{uri}?oper={filterContext.HttpContext.Request["oper"]}";
new G5msLog().WriteLog(currentUser.LoginName, uri, DateTime.Now, result.ToString());
}
}
}

@花飘水流兮: 我知道要代码是不对的，我只是对这方面有些不了解，还是要谢谢你