<configuration>
            <system.web>
                <!--設(shè)置Forms身份驗(yàn)證-->
                <authentication mode="Forms">
                    <forms loginUrl="Login.aspx" name="MyWebApp.APSXAUTH" path="/" protection="All" timeout="30"/>
                </authentication>
                <authorization>
                    <allow users="*"/>
                </authorization>
            </system.web>
        </configuration>

        <!--設(shè)置Admin目錄的訪問(wèn)權(quán)限-->
        <location path="Admin">
            <system.web>
                <authorization>
                    <allow roles="Admin"/>
                    <deny users="?"/>
                </authorization>
            </system.web>
        </location>
        <!--設(shè)置Users目錄的訪問(wèn)權(quán)限-->
        <location path="Users">
            <system.web>
                <authorization>
                    <allow roles="User"/>
                    <deny users="?"/>
                </authorization>
            </system.web>
        </location>

        protected void btnLogin_Click(object sender, EventArgs e)
        {    
            //Forms身份驗(yàn)證初始化
            FormsAuthentication.Initialize();
            //驗(yàn)證用戶輸入并得到登錄用戶，txtName是用戶名稱，txtPassword是登錄密碼
            UserModel um = ValidUser(txtName.Text.Trim(),txtPassword.Text.Trim());
            if (um != null)
            {
             //創(chuàng)建身份驗(yàn)證票據(jù)
             FormsAuthenticationTicket ticket = new FormsAuthenticationTicket(1,
                                            um.Name,
                                            DateTime.Now,
                                            DateTime.Now.AddMinutes(30),
                                            true,
                                            um.Roles,//用戶所屬的角色字符串
                                            FormsAuthentication.FormsCookiePath);
             //加密身份驗(yàn)證票據(jù)
             string hash = FormsAuthentication.Encrypt(ticket);
             //創(chuàng)建要發(fā)送到客戶端的cookie
             HttpCookie cookie = new HttpCookie(FormsAuthentication.FormsCookieName, hash);
             if (ticket.IsPersistent)
             {
                cookie.Expires = ticket.Expiration;
             }
             //把準(zhǔn)備好的cookie加入到響應(yīng)流中
             Response.Cookies.Add(cookie);

             //轉(zhuǎn)發(fā)到請(qǐng)求的頁(yè)面
             Response.Redirect(FormsAuthentication.GetRedirectUrl(um.Name,false));
            }
            else
            {
             ClientScriptManager csm = this.Page.ClientScript;
             csm.RegisterStartupScript(this.GetType(), "error_tip", "alert('用戶名或密碼錯(cuò)誤！身份驗(yàn)證失敗！');", true);
            }
        }    
        //驗(yàn)證用戶
        private UserModel ValidUser(string name, string password)
        {
            return new UserService().Validate(name, password);
        }

        //改造原來(lái)的User，給其添加一個(gè)用戶所屬的角色數(shù)據(jù)
        protected void Application_AuthenticateRequest(object sender, EventArgs e)
        {
            if (HttpContext.Current.User != null )
            {
                if (HttpContext.Current.User.Identity.IsAuthenticated)
                {
                    if (HttpContext.Current.User.Identity is FormsIdentity)
                    {
                        FormsIdentity id = (FormsIdentity)HttpContext.Current.User.Identity;
                        FormsAuthenticationTicket ticket = id.Ticket;

                        string userData = ticket.UserData;
                        string[] roles = userData.Split(',');
                        //重建HttpContext.Current.User，加入用戶擁有的角色數(shù)組
                        HttpContext.Current.User = new GenericPrincipal(id, roles);
                    }
                }
            }
        }

        protected void Page_Load(object sender, EventArgs e)
        {
            //判斷通過(guò)身份驗(yàn)證的用戶是否有權(quán)限訪問(wèn)本頁(yè)面
            FormsIdentity id = (FormsIdentity)HttpContext.Current.User.Identity;
            //判斷通過(guò)身份驗(yàn)證的用戶是否是Admin角色
            if (!id.Ticket.UserData.Contains("Admin"))
            {
                //跳轉(zhuǎn)到訪問(wèn)權(quán)限不夠的錯(cuò)誤提示頁(yè)面
                Response.Redirect("~/Error/AccessError.htm", true);
            }
        }
        //安全退出按鈕的代碼
        protected void btnExit_Click(object sender, EventArgs e)
        {
            //注銷票據(jù)
            FormsAuthentication.SignOut();
            ClientScriptManager csm = this.Page.ClientScript;
            csm.RegisterStartupScript(this.GetType(), "exit_tip", "alert('您已經(jīng)安全退出了！');", true);
        }

        protected void Page_Load(object sender, EventArgs e)
        {
            //判斷通過(guò)身份驗(yàn)證的用戶是否有權(quán)限訪問(wèn)本頁(yè)面
            FormsIdentity id = (FormsIdentity)HttpContext.Current.User.Identity;
            //判斷通過(guò)身份驗(yàn)證的用戶是否是User角色
            if (!id.Ticket.UserData.Contains("User"))
            {
                //跳轉(zhuǎn)到訪問(wèn)權(quán)限不夠的錯(cuò)誤提示頁(yè)面
                Response.Redirect("~/Error/AccessError.htm", true);
            }
        }
        //安全退出按鈕的代碼
        protected void btnExit_Click(object sender, EventArgs e)
        {
            //注銷票據(jù)
            FormsAuthentication.SignOut();
            ClientScriptManager csm = this.Page.ClientScript;
            csm.RegisterStartupScript(this.GetType(), "exit_tip", "alert('您已經(jīng)安全退出了！');", true);
        }