续订FormsAuthenticationTicket UserData

Question

在我的登录页面上，FormsAuthenticationTicket被设置为具有一些自定义用户数据的持久性cookie。现在，我需要更改此自定义用户数据，因此它包含另一个参数。当以前登录的用户下次访问该站点时，我在Application_PostAuthenticateRequest中反序列化了这个自定义用户数据，但现在我将不再包含新添加的参数。

在不要求用户再次登录的情况下，我可以检索此参数吗？

如果不是，如何告诉持久cookie它需要“更新”？

Cookie设置。userId是一个新参数：

CustomPrincipalSerializeModel serializeModel = new CustomPrincipalSerializeModel();
serializeModel.FirstName = model.UserName;
serializeModel.userId = model.userId;

JavaScriptSerializer serializer = new JavaScriptSerializer();

string userData = serializer.Serialize(serializeModel);

FormsAuthenticationTicket authTicket = new FormsAuthenticationTicket(
        1,
        model.UserName,
        DateTime.Now,
        DateTime.Now.AddYears(5),
        model.RememberMe,
        userData);

string encTicket = FormsAuthentication.Encrypt(authTicket);
HttpCookie faCookie = new HttpCookie(FormsAuthentication.FormsCookieName, encTicket);

faCookie.Expires = authTicket.Expiration;
Response.Cookies.Add(faCookie);

return RedirectToAction("Index", "Home");

Cookie检索。Userid是新参数，对于以前登录的用户为null：

HttpCookie authCookie = Request.Cookies[FormsAuthentication.FormsCookieName];

if (authCookie != null)
{
    FormsAuthenticationTicket authTicket = FormsAuthentication.Decrypt(authCookie.Value);

    JavaScriptSerializer serializer = new JavaScriptSerializer();

    CustomPrincipalSerializeModel serializeModel = serializer.Deserialize<CustomPrincipalSerializeModel>(authTicket.UserData);

    CustomPrincipal newUser = new CustomPrincipal(authTicket.Name);
    newUser.FirstName = serializeModel.FirstName;
    newUser.userId = serializeModel.userId;

    HttpContext.Current.User = newUser;
}

Answer 1

您使用的是web表单还是MVC？

看起来您的HttpContext.Current.User设置是正确的。问题可能是，默认情况下，您的控制器/视图仍然认为它是它的IPrincipal，而不是您的自定义主体，因此您无法访问您设置的新数据。

您可以强制转换它，或者在如下所示的基础控制器中设置它。

// in some controller action
var firstName  = ((CustomPrincipal)User).FirstName


[Authorize]
public class BaseController : Controller
{
    protected virtual new CustomPrincipal User
    {
        get { return HttpContext.User as CustomPrincipal; }
    }
}