Android与IIS身份验证——Form验证
内容摘要前言
设计思路
ASP.NET服务器端
Android客户端
运行结果
上篇《Android与IIS身份验证——基本验证》实现了Android客户端与IIS的简单验证。而这种验证方式虽然使用起来比较简单，但是也有很多缺点。如，安全性较差，账号密码设置不灵活。让我们回顾一下ASP.NET的身份验证方式：Windows、Form和Passport。这三种验证方式中，Form身份验证方式最经常使用，因为它有很多优越性，其优点我就不一一介绍了。那么，怎样实现Android客户端与IIS的Form身份验证呢？我整理了一下，需要以下几个步骤：
一、设计思路
Android客户端访问IIS服务器时，当没有登陆时，ASP.NET通过Form集成验证方法会返回一个登陆页面。然后输入正确的用户名和密码，就可以进入主程序了。流程如图1.1所示。
图1.1
在Android客户端访问以IIS为宿主的ASP.NET服务器时，返回JSON格式来传递数据。客户端中，根据返回数据的不同而判断当前状态是否已登陆。由于Form验证是保存了Cookie，所示每次调用Http请求之前要先添加上次请求的Cookie。
二、ASP.NET服务器端
创建一个ASP.NET MVC网站项目。
首先，由于每次请求都返回JSON格式的数据，我们编写一个Model类来承载数据。
public class ResponseResult
{
/// <summary>
/// 是否已登录
/// </summary>
public bool IsAuthenticated { get; set; }
/// <summary>
/// 是否执行成功
/// </summary>
public bool IsSuccess { get; set; }
/// <summary>
/// 登录账号
/// </summary>
public string Identity { get; set; }
/// <summary>
/// 执行结果
/// </summary>
public object Result { get; set; }
}
接着，编写HomeController：
public class HomeController : Controller
{
public ActionResult Index()
{
return Json(new ResponseResult
{
Result = "登陆成功",
IsAuthenticated = true,
IsSuccess = true,
Identity = this.User.Identity.Name
}, "text/html", JsonRequestBehavior.AllowGet);
}
public ActionResult LogOn()
{
return Json(new ResponseResult
{
Result = "您尚未登录",
IsSuccess = true
}, "text/html", JsonRequestBehavior.AllowGet);
}
public ActionResult Register(string account, string password)
{
if (account == "liudong" && password == "123")
{
FormsAuthentication.SetAuthCookie(account, false);
return Json(new ResponseResult
{
Result = "登录成功",
IsSuccess = true,
IsAuthenticated = true,
Identity = account
}, "text/html", JsonRequestBehavior.AllowGet);
}
else
{
return Json(new ResponseResult
{
Result = "用户名或密码错误",
}, "text/html", JsonRequestBehavior.AllowGet);
}
}
Index Action为登陆认证后才能访问的Action。
LogOn Action为未登陆时跳转的Action。
Register Action为登陆Action，用户名和密码正确后就保存Form验证的Cookie。
然后，在Web.config中配置Form验证配置
<authentication mode="Forms">
<forms loginUrl="~/Home/LogOn" timeout="2880" />
</authentication>
最后，配置IIS，部署ASP.NET MV网站，如图2.1所示。
图2.1
三、Android客户端
首先，编写一个调用Http请求的类。
package ld.com.authorize;
import java.io.BufferedReader;
import java.io.InputStreamReader;
import java.util.List;
import org.apache.http.HttpEntity;
import org.apache.http.HttpResponse;
import org.apache.http.NameValuePair;
import org.apache.http.client.CookieStore;
import org.apache.http.client.entity.UrlEncodedFormEntity;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.impl.client.AbstractHttpClient;
import org.apache.http.impl.client.DefaultHttpClient;
import android.util.Log;
public abstract class HttpHelper {
private final static String TAG = "HttpHelper";
private final static String SERVER_URL = "http://192.168.1.104:180/Home/";
private static CookieStore cookieStore;
public static String invoke(String actionName, List<NameValuePair> params) {
String result = null;
try {
String url = SERVER_URL + actionName + "/";
Log.d(TAG, "url is" + url);
HttpPost httpPost = new HttpPost(url);
if (params != null && params.size() > 0) {
HttpEntity entity = new UrlEncodedFormEntity(params, "UTF-8");
httpPost.setEntity(entity);
}
DefaultHttpClient httpClient = new DefaultHttpClient();
// 添加Cookie
if (cookieStore != null) {
httpClient.setCookieStore(cookieStore);
}
HttpResponse httpResponse = httpClient.execute(httpPost);
StringBuilder builder = new StringBuilder();
BufferedReader reader = new BufferedReader(new InputStreamReader(
httpResponse.getEntity().getContent()));
for (String s = reader.readLine(); s != null; s = reader.readLine()) {
builder.append(s);
}
result = builder.toString();
Log.d(TAG, "result is ( " + result + " )");
// 保存Cookie
cookieStore = ((AbstractHttpClient) httpClient).getCookieStore();
} catch (Exception e) {
Log.e(TAG, e.toString());
}
Log.d(TAG, "over");
return result;
}
public static String invoke(String actionName) {
return invoke(actionName, null);
}
}
注意的是，需要存储一个全局的Cookie，在每次调用前添加上去，再在调用j结束后保存它。
接着，添加两个布局文件：
<?xml version="1.0" encoding="utf-8"?>
<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
android:orientation="vertical" android:layout_width="fill_parent"
android:layout_height="fill_parent">
<TextView android:text="账号" android:layout_width="fill_parent"
android:layout_height="20dip" />
<EditText android:layout_width="fill_parent" android:hint="请输入账号"
android:layout_height="40dip" android:id="@+id/edtAccount" />
<TextView android:text="密码" android:layout_width="fill_parent"
android:layout_height="20dip" />
<EditText android:layout_width="fill_parent" android:hint="请输入密码"
android:password="true" android:layout_height="40dip" android:id="@+id/edtPassword" />
<Button android:text="登录" android:layout_width="fill_parent"
android:layout_height="40dip" android:id="@+id/btnLogon" />
</LinearLayout>
<?xml version="1.0" encoding="utf-8"?>
<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
android:orientation="vertical" android:layout_width="fill_parent"
android:layout_height="fill_parent">
<Button android:text="调用" android:id="@+id/btnInvoke"
android:layout_width="fill_parent" android:layout_height="wrap_content" />
</LinearLayout>
然后、编写登陆和主Activity
package ld.com.authorize;
import java.util.ArrayList;
import java.util.List;
import org.apache.http.NameValuePair;
import org.apache.http.message.BasicNameValuePair;
import org.json.JSONException;
import org.json.JSONObject;
import android.app.Activity;
import android.app.ProgressDialog;
import android.content.Intent;
import android.os.AsyncTask;
import android.os.Bundle;
import android.util.Log;
import android.view.View;
import android.view.View.OnClickListener;
import android.widget.Button;
import android.widget.EditText;
import android.widget.Toast;
public class LogonActivity extends Activity {
private final String TAG = this.getClass().getSimpleName();
private EditText edtAccount;
private EditText edtPassword;
private Button btnLogon;
/** Called when the activity is first created. */
@Override
public void onCreate(Bundle savedInstanceState) {
super.onCreate(savedInstanceState);
setContentView(R.layout.logon);
edtAccount = (EditText) this.findViewById(R.id.edtAccount);
edtPassword = (EditText) this.findViewById(R.id.edtPassword);
btnLogon = (Button) this.findViewById(R.id.btnLogon);
setButtonOnClick();
}
private void setButtonOnClick() {
this.btnLogon.setOnClickListener(new OnClickListener() {
@Override
public void onClick(View v) {
// TODO Auto-generated method stub
AsyncTask<Void, Void, String> task = new AsyncTask<Void, Void, String>() {
private ProgressDialog progressDialog;
@Override
protected void onPostExecute(String result) {
// TODO Auto-generated method stub
// super.onPostExecute(result);
progressDialog.cancel();
Log.d(TAG, result);
try {
JSONObject json = new JSONObject(result);
String msg = json.getString("Result");
// 是否登录
if (json.getBoolean("IsSuccess")) {
Toast.makeText(LogonActivity.this, msg,
Toast.LENGTH_SHORT).show();
// 跳转登录Activity
Intent intent = new Intent();
intent.setClass(LogonActivity.this,
MainActivity.class);
LogonActivity.this.startActivity(intent);
} else {
Toast.makeText(LogonActivity.this, msg,
Toast.LENGTH_SHORT).show();
}
} catch (JSONException e) {
// TODO Auto-generated catch block
Log.e(TAG, e.toString());
}
}
@Override
protected void onPreExecute() {
// TODO Auto-generated method stub
super.onPreExecute();
progressDialog = new ProgressDialog(LogonActivity.this);
progressDialog.setCancelable(false);
progressDialog
.setProgressStyle(ProgressDialog.STYLE_SPINNER);
progressDialog.setTitle("登录中，请稍后...");
progressDialog.show();
}
@Override
protected String doInBackground(Void... arg0) {
// TODO Auto-generated method stub
String account = edtAccount.getText().toString();
String password = edtPassword.getText().toString();
List<NameValuePair> params = new ArrayList<NameValuePair>();
params.add(new BasicNameValuePair("account", account));
params.add(new BasicNameValuePair("password", password));
try {
return HttpHelper.invoke("Register", params);
} catch (Exception e) {
Log.e(TAG, e.toString());
return null;
}
}
};
task.execute();
}
});
}
}
package ld.com.authorize;
import org.json.JSONException;
import org.json.JSONObject;
import android.app.Activity;
import android.app.ProgressDialog;
import android.content.Intent;
import android.os.AsyncTask;
import android.os.Bundle;
import android.util.Log;
import android.view.View;
import android.view.View.OnClickListener;
import android.widget.Button;
import android.widget.Toast;
public class MainActivity extends Activity {
private final String TAG = this.getClass().getSimpleName();
private Button btnInvoke;
/** Called when the activity is first created. */
@Override
public void onCreate(Bundle savedInstanceState) {
super.onCreate(savedInstanceState);
setContentView(R.layout.main);
btnInvoke = (Button) this.findViewById(R.id.btnInvoke);
setInvokeOnClick();
}
private void setInvokeOnClick() {
btnInvoke.setOnClickListener(new OnClickListener() {
@Override
public void onClick(View v) {
// TODO Auto-generated method stub
AsyncTask<Void, Void, String> task = new AsyncTask<Void, Void, String>() {
private ProgressDialog progressDialog;
@Override
protected void onPostExecute(String result) {
// TODO Auto-generated method stub
// super.onPostExecute(result);
progressDialog.cancel();
Log.d(TAG, result);
try {
JSONObject json = new JSONObject(result);
// 是否登录
if (json.getBoolean("IsAuthenticated")) {
String msg = json.getString("Identity") + ":"
+ json.getString("Result");
Toast.makeText(MainActivity.this, msg,
Toast.LENGTH_SHORT).show();
} else {
Toast.makeText(MainActivity.this,
json.getString("Result"),
Toast.LENGTH_SHORT).show();
// 跳转登录Activity
Intent intent = new Intent();
intent.setClass(MainActivity.this,
LogonActivity.class);
MainActivity.this.startActivity(intent);
}
} catch (JSONException e) {
// TODO Auto-generated catch block
Log.e(TAG, e.toString());
}
}
@Override
protected void onPreExecute() {
// TODO Auto-generated method stub
super.onPreExecute();
progressDialog = new ProgressDialog(MainActivity.this);
progressDialog.setCancelable(false);
progressDialog
.setProgressStyle(ProgressDialog.STYLE_SPINNER);
progressDialog.setTitle("调用中，请稍后...");
progressDialog.show();
}
@Override
protected String doInBackground(Void... arg0) {
// TODO Auto-generated method stub
try {
return HttpHelper.invoke("Index");
} catch (Exception e) {
Log.e(TAG, e.toString());
return null;
}
}
};
task.execute();
}
});
}
}
最后，设置访问权限：<uses-permission android:name="android.permission.INTERNET" />
四、运行结果
1.进入主MainActivity，图4.1.1所示。
图4.1.1
2.调用Http请求，图4.2.1所示。
图4.2.1
3.由于没有登陆，所以跳转到登陆Activity，图4.3.1所示。
图4.3.1
4.故意输入错误密码使其登陆失败，图4.4.1所示。
图4.4.1
5.输入正确的密码后跳转到主Activity，如图4.5.1所示。
图4.5.1
6.再一次调用Http请求，这次是已登陆状态，图4.6.1所示。
图4.6.1
代码下载
作者：刘冬.NET
出处：http://www.iyunv.com/GoodHelper/archive/2011/08/19/android_iis_02.html
欢迎转载，但须保留版权。
页:
[1]