单个登录用户登录没控制住问题修改

yl

2022-10-29 541f5ec7d947837f873435bea873e95c4b6cc95e

 VueWebApi/Controllers/LoginController.cs

@@ -40,7 +40,7 @@
                {
                    List<User> mss = new List<User>();
                    User ms = new User();
                    ms.guid = username + password + Guid.NewGuid().ToString();
                    ms.guid = usertype+username + password + Guid.NewGuid().ToString();
                    ms.userid = Convert.ToInt32(dt.Rows[0]["ID"].ToString());
                    ms.usercode = dt.Rows[0]["USERCODE"].ToString();
                    ms.username = dt.Rows[0]["USERNAME"].ToString();
@@ -85,6 +85,7 @@
                            HttpContext.Current.Session["User"] = JsonConvert.SerializeObject(ms);
                            //写入登录操作记录
                            mes = LoginBLL.LoginBas(ms.usercode, ms.usertype);
                            mes.data = ms;
                            mes.code = "200";
                            mes.Message = "登录成功!";
                        }
@@ -121,13 +122,23 @@
        /// <param name="usercode">用户编码</param>
        /// <param name="username">用户名</param>
        /// <param name="usertype">操作端PC/APP</param>
        /// <param name="rid">rid极光推送获取设备id</param>
        /// <returns></returns>
        [Route(template: "ForcedOffline")]
        [HttpPost]
        public HttpResponseMessage ForcedOffline(int userid, string usercode, string username, string usertype)
        public HttpResponseMessage ForcedOffline(int userid, string usercode, string username, string usertype,string rid)
        {
            string sql="";
            List<object> list = new List<object>();
            try
            {
                if (usertype == "APP")
                {
                    //更新rid
                    sql = @"update [dbo].[TUser] set rid=@rid where usercode=@usercode";
                    list.Add(new { str = sql, parm = new { rid = rid, usercode = username } });
                    bool aa = DapperHelper.DoTransaction(list);
                }
                redis.Remove("LoginUserID" + usertype + userid, 0); //删除redis
                mes.code = "200";
                mes.count = 0;
@@ -202,6 +213,8 @@
        [ChannelActionFilter]
        public HttpResponseMessage LoginOut(int userid, string usercode, string username, string usertype)
        {
            var sql = "";
            List<object> list = new List<object>();
            mes = LoginBLL.LoginOut(userid, usercode, username, usertype);
            return mes.ResponseMess(mes);
        }
@@ -228,27 +241,86 @@
                DataTable dt = LoginBLL.LoginSearch(username, password);
                if (dt.Rows.Count > 0)
                {
                    //写入登录操作记录
                    mes = LoginBLL.LoginBas(username, usertype);
                    //更新rid
                    sql = @"update [dbo].[TUser] set rid=@rid where usercode=@usercode";
                    list.Add(new { str = sql, parm = new { rid = rid, usercode = username } });
                    bool aa = DapperHelper.DoTransaction(list);

                    List<User> mss = new List<User>();
                    User ms = new User();
                    //ms.guid = username + password + Guid.NewGuid().ToString();
                    ms.guid = rid.ToString();
                    ms.guid = usertype+username + password + Guid.NewGuid().ToString();
                    ms.userid = Convert.ToInt32(dt.Rows[0]["ID"].ToString());
                    ms.usercode = dt.Rows[0]["USERCODE"].ToString();
                    ms.username = dt.Rows[0]["USERNAME"].ToString();
                    ms.password = dt.Rows[0]["PASSWORD"].ToString();
                    ms.usertype = usertype;
                    ms.rediskey = "LoginUserID" + ms.usertype + ms.userid;
                    mss.Add(ms);
                    HttpContext.Current.Session.Clear(); //从会话状态集合中删除所有的键值
                    User loginUser = JsonConvert.DeserializeObject<User>(JsonConvert.SerializeObject(ms));
                    //如果redis登录用户中不存在当前用户
                    if (redis.Get<User>("LoginUserID" + ms.usertype + ms.userid, 0) == null)
                    {
                        //写入redis(注意：redis类里面的失效时间必须在key创建完成之后才生效)
                        redis.Set<User>("LoginUserID" + ms.usertype + ms.userid, ms, redis.secondsTimeOut, 0);
                        //登录信息写入session
                        HttpContext.Current.Session["User"] = JsonConvert.SerializeObject(ms);
                        //更新rid
                        sql = @"update [dbo].[TUser] set rid=@rid where usercode=@usercode";
                        list.Add(new { str = sql, parm = new { rid = rid, usercode = username } });
                        bool aa = DapperHelper.DoTransaction(list);
                        //写入登录操作记录
                        mes = LoginBLL.LoginBas(ms.usercode, ms.usertype);
                        mes.code = "200";
                        mes.Message = "登录成功!";
                        mes.data = ms;
                    }
                    else //如果存在
                    {
                        //获取redis中当前用户信息
                        User r_loginUser = redis.Get<User>("LoginUserID" + ms.usertype + ms.userid, 0);
                        //如果session中的用户usercode和redis中的用户usercode匹配
                        if ((r_loginUser.usercode + r_loginUser.usertype).Equals(loginUser.usercode + loginUser.usertype))
                        {
                            mes.data = ms;
                            mes.code = "302";
                            mes.Message = "当前账号已登录,是否强制下线!";
                        }
                        else
                        {
                            //重置过期时间(注意：redis类里面的失效时间必须在key创建完成之后才生效)
                            redis.Set<User>("LoginUserID" + ms.usertype + loginUser.userid, loginUser, redis.secondsTimeOut, 0);
                            //登录信息写入session
                            HttpContext.Current.Session["User"] = JsonConvert.SerializeObject(ms);
                            //更新rid
                            sql = @"update [dbo].[TUser] set rid=@rid where usercode=@usercode";
                            list.Add(new { str = sql, parm = new { rid = rid, usercode = username } });
                            bool aa = DapperHelper.DoTransaction(list);
                            //写入登录操作记录
                            mes = LoginBLL.LoginBas(ms.usercode, ms.usertype);
                            mes.data = ms;
                            mes.code = "200";
                            mes.Message = "登录成功!";
                        }
                    }

                    mes.code = "200";
                    mes.Message = "登录成功!";
                    mes.data = ms;

                    ////写入登录操作记录
                    //mes = LoginBLL.LoginBas(username, usertype);
                    ////更新rid
                    //sql = @"update [dbo].[TUser] set rid=@rid where usercode=@usercode";
                    //list.Add(new { str = sql, parm = new { rid = rid, usercode = username } });
                    //bool aa = DapperHelper.DoTransaction(list);

                    //List<User> mss = new List<User>();
                    //User ms = new User();
                    ////ms.guid = username + password + Guid.NewGuid().ToString();
                    //ms.guid = rid.ToString();
                    //ms.userid = Convert.ToInt32(dt.Rows[0]["ID"].ToString());
                    //ms.usercode = dt.Rows[0]["USERCODE"].ToString();
                    //ms.username = dt.Rows[0]["USERNAME"].ToString();
                    //ms.password = dt.Rows[0]["PASSWORD"].ToString();
                    //ms.usertype = usertype;
                    //mss.Add(ms);

                    //mes.code = "200";
                    //mes.Message = "登录成功!";
                    //mes.data = ms;
                }
                else
                {