ASP.NET MVC3 实现用户登陆验证

自定义一个受权筛选器类，继承于AuthorizeAttribute：

using System;
using System.Web;
using System.Web.Mvc;

namespace MvcApplication1
{
    public class DWAuthorizeAttribute : AuthorizeAttribute
    {
        /// <summary>
        /// 判断用户是否登陆
        /// </summary>
        /// <param name="filterContext"></param>
        public override void OnAuthorization(AuthorizationContext filterContext)
        {
            HttpContextBase context = filterContext.HttpContext;
            if (context.Session["LoginUser"] == null)
                context.Response.Redirect("~/User/Login");
        }
    }
}

 在需进行登陆验证的Action上加约束：

[DWAuthorize]
public ActionResult Index()
{
    return View();
}