使用AJAX和ASP.NET Core登錄

Question

我想將登錄表單設置爲PartialView或ViewComponent。用戶輸入用戶名和密碼我想用ajax登錄並顯示可能的驗證錯誤，無論是使用jQuery還是重新渲染服務器上的登錄表單。我不在乎。

這似乎微不足道，但是否有任何現有的樣本或模板登錄使用AJAX？我不想重新發明輪子。

我開始使用ASP.NET Core Web Application的默認Visual Studio模板，其中登錄是獨立頁面的本地帳戶。它使用引導程序。理想情況下，我想盡可能地貼近這一點。

登錄後的動作是這樣的：

[HttpPost] 
    [AllowAnonymous] 
    [ValidateAntiForgeryToken] 
    public async Task<IActionResult> Login(LoginFormViewModel model, string returnUrl = null) 
    { 
     ViewData["ReturnUrl"] = returnUrl; 
     if (ModelState.IsValid) 
     { 
      // This doesn't count login failures towards account lockout 
      // To enable password failures to trigger account lockout, set lockoutOnFailure: true 
      var result = await _signInManager.PasswordSignInAsync(model.Email, model.Password, model.RememberMe, lockoutOnFailure: false); 
      if (result.Succeeded) 
      { 
       _logger.LogInformation(1, "User logged in."); 
       return RedirectToLocal(returnUrl); 
      } 
      if (result.IsLockedOut) 
      { 
       _logger.LogWarning(2, "User account locked out."); 
       return View("Lockout"); 
      } 
      else 
      { 
       ModelState.AddModelError(string.Empty, "Invalid login attempt."); 
      } 
     } 

     // If we got this far, something failed, redisplay form 
     return View(model); 
    } 

Answer 1

這裏是一個片段我在基於AJAX的登錄，以獲得帳戶控制代碼，您開始：

// GET: /Account/LoginAjax 
[HttpGet] 
[AllowAnonymous] 
[RequireHttps] 
public IActionResult LoginAjax(string returnUrl = null) 
{ 
    if (!_signInManager.IsSignedIn(User)) 
    { 
     if (Request.Cookies["Identity.External"] != null) 
     { 
      // TODO: this is a temp solution, see https://github.com/aspnet/Security/pull/980 
      // http://stackoverflow.com/questions/38751641/app-redirects-to-account-accessdenied-on-adding-oauth 
      // when fixed in Microsoft.AspNetCore.Authentication, remove the whole block 
      Response.Cookies.Delete("Identity.External"); 
     } 
    } 
    return PartialView("_LoginPartial", new LoginViewModel { RememberMe = true, ReturnUrl = returnUrl }); 
} 

// POST: /Account/LoginAjax 
[HttpPost] 
[AllowAnonymous] 
[ValidateAntiForgeryToken] 
[RequireHttps] 
public async Task<IActionResult> LoginAjax(LoginViewModel model, string returnUrl = null) 
{ 
    returnObject ret = new returnObject(); 
    if (ModelState.IsValid) 
    { 
     // This doesn't count login failures towards account lockout 
     // To enable password failures to trigger account lockout, set lockoutOnFailure: true 
     var result = await _signInManager.PasswordSignInAsync(model.Email, model.Password, model.RememberMe, lockoutOnFailure: false); 
     if (result.Succeeded) 
     { 
      ret.success = true; 
      ret.message = "logged-in"; 
     } 
     else if (result.IsLockedOut) 
     { 
      ModelState.AddModelError(string.Empty, "This account has been locked out, please try again later."); 
     } 
     else 
     { 
      ModelState.AddModelError(string.Empty, "The email address or password supplied are incorrect. Please check your spelling and try again."); 
     } 
    } 
    if (!ret.success) //login was unsuccessful, return model errors 
     ret.message = ModelErorrs(ModelState); 

    return Json(ret); 
} 

public static string ModelErorrs(Microsoft.AspNetCore.Mvc.ModelBinding.ModelStateDictionary modelState) 
{ 
    return string.Join("; ", modelState.Values 
     .SelectMany(x => x.Errors) 
     .Select(x => x.ErrorMessage)); 
} 

public class returnObject 
{ 
    public bool success { get; set; } = false; 
    public string message { get; set; } = ""; 
    public string action { get; set; } = ""; 
} 

_LoginPartial.chtml：

<form id="formLoginAJAX" asp-controller="Account" asp-action="LoginAjax" asp-route-returnurl="@Model.ReturnUrl" method="post"> 
...... 
</form> 

Prototype fot客戶端JS：

// dialog form submit handler 
$form.submit(function (event) { 
    event.preventDefault();     
    if (!$form.valid()) 
     return; // form is not valid 

    // submit validated form via Ajax 
    var res = { success: false, message: '' }; 
    $.ajax({ 
     type: 'POST', 
     dataType: 'json', 
     url: $form.attr('action'), 
     xhrFields: { 
      withCredentials: true 
     }, 
     data: $form.serializeObject(), 
     beforeSend: function() { 
      //disable submit button to prevent double-click       
     }, 
     success: function (data) { 
      res = data; 
     }, 
     error: function (jqXHR, textStatus, errorThrown) { 
      res.message = 'Request failed: ' + errorThrown; 
     }, 
     complete: function() { 
      if (res.success) { 
       // all good, user is logged-in 
       // do callbacks if needed 
       // close dialog 
      } else { 
       // no luck, show returned errors (res.message) in the summary (".validation-summary")        
      }       
     } 
    }); 
});