/// <summary>
    /// 生成秘鑰
    /// </summary>
    /// <param name="timestamp"></param>
    /// <returns></returns>
    public static string CreateToken(DateTime timestamp)
    {
      StringBuilder securityKey = new StringBuilder(MD5Encypt(timestamp.ToString("yyyy")));
      securityKey.Append(MD5Encypt(timestamp.ToString("MM")));
      securityKey.Append(MD5Encypt(timestamp.ToString("dd")));
      securityKey.Append(MD5Encypt(timestamp.ToString("HH")));
      securityKey.Append(MD5Encypt(timestamp.ToString("mm")));
      securityKey.Append(MD5Encypt(timestamp.ToString("ss")));
      return MD5Encypt(securityKey.ToString());
    }

/// <summary>
  /// 授權(quán)枚舉
  /// </summary>
  public enum AuthCodeEnum
  {
    Public = 1,
    Login = 2
  }

  /// <summary>
  /// 授權(quán)過(guò)濾器
  /// </summary>
  public class AuthAttribute : ActionFilterAttribute
  {
    /// <summary> 
    /// 權(quán)限代碼 
    /// </summary> 
    public AuthCodeEnum Code { get; set; }

    /// <summary> 
    /// 驗(yàn)證權(quán)限
    /// </summary> 
    /// <param name="filterContext"></param> 
    public override void OnActionExecuting(ActionExecutingContext filterContext)
    {
      var request = filterContext.HttpContext.Request;
      var session = filterContext.HttpContext.Session;
      //如果存在身份信息 
      if (Common.CurrentUser == null)
      {
        if (Code == AuthCodeEnum.Public)
        {
          return;
        }
        string reqToken = request["Token"];
        string ticket = request["Ticket"];
        Cache cache = HttpContext.Current.Cache;
        //沒(méi)有獲取到Token或者Token驗(yàn)證不通過(guò)或者沒(méi)有取到從P回調(diào)的ticket 都進(jìn)行再次請(qǐng)求P
        TokenModel tokenModel= cache.Get(ConstantHelper.TOKEN_KEY)==null?null:(TokenModel)cache.Get(ConstantHelper.TOKEN_KEY);
        if (string.IsNullOrEmpty(reqToken) || tokenModel == null || tokenModel.Token!= reqToken ||
          string.IsNullOrEmpty(ticket))
        {
          DateTime timestamp = DateTime.Now;
          string returnUrl = request.Url.AbsoluteUri;
          tokenModel = new TokenModel
          {
            TimeStamp = timestamp,
            Token = AuthernUtil.CreateToken(timestamp)
          };
          //Token加入緩存中，設(shè)計(jì)過(guò)期時(shí)間為20分鐘
          cache.Add(ConstantHelper.TOKEN_KEY, tokenModel, null, DateTime.Now.AddMinutes(20),Cache.NoSlidingExpiration,CacheItemPriority.Default, null);
          filterContext.Result = new ContentResult
          {
            Content = GetAuthernScript(AuthernUtil.GetAutherUrl(tokenModel.Token, timestamp), returnUrl)
          };
          return;
        }
        LoginService service = new LoginService();
        var userinfo = service.GetUserInfo(ticket);
        session[ConstantHelper.USER_SESSION_KEY] = userinfo;
        //驗(yàn)證通過(guò),cache中去掉Token,保證每個(gè)token只能使用一次
        cache.Remove(ConstantHelper.TOKEN_KEY);
      }
    }

    /// <summary>
    /// 生成跳轉(zhuǎn)腳本
    /// </summary>
    /// <param name="authernUrl">統(tǒng)一授權(quán)地址</param>
    /// <param name="returnUrl">回調(diào)地址</param>
    /// <returns></returns>
    private string GetAuthernScript(string authernUrl, string returnUrl)
    {
      StringBuilder sbScript = new StringBuilder();
      sbScript.Append("<script type='text/javascript'>");
      sbScript.AppendFormat("window.location.href='{0}&returnUrl=' + encodeURIComponent('{1}');", authernUrl, returnUrl);
      sbScript.Append("</script>");
      return sbScript.ToString();
    }
  }

[Auth(Code = AuthCodeEnum.Login)]
     public ActionResult Index()
     {
       return View();
    }

/// <summary>
    /// 授權(quán)登陸驗(yàn)證
    /// </summary>
    /// <returns></returns>
    [HttpPost]
    public ActionResult PassportVertify()
    {
      var cookie=Request.Cookies[ConstantHelper.USER_COOKIE_KEY];
      if (cookie == null ||string.IsNullOrEmpty(cookie.ToString()))
      {
        return RedirectToAction("Login", new { ReturnUrl = Request["ReturnUrl"] ,Token= Request["Token"] });
      }
      string userinfo = cookie.ToString();
      var success= passportservice.AuthernVertify(Request["Token"], Convert.ToDateTime(Request["TimeStamp"]));
      if (!success)
      {
        return RedirectToAction("Login", new { ReturnUrl = Request["ReturnUrl"], Token = Request["Token"] });
      }
      return Redirect(passportservice.GetReturnUrl(userinfo, Request["Token"],Request["ReturnUrl"]));
    }

/// <summary>
    /// 驗(yàn)證令牌
    /// </summary>
    /// <param name="token">令牌</param>
    /// <param name="timestamp">時(shí)間戳</param>
    /// <returns></returns>
    public bool AuthernVertify(string token,DateTime timestamp)
    {
      return AuthernUtil.CreateToken(timestamp) == token;
    }