实现思路
0.在请求登录接口时判断是否登录成功，
1.如果登录失败将记录当前的用户登录次数其有效期为一分钟，一分钟后重新计次，
查找在用户10分钟内的登录记录，超过设定的次数后禁止登录，
在规定时间内登录成功，取消所有计次，并解锁用户
2.如果登录成功，取消所有计次，并解锁用户登录
3.实现仅依赖于系统缓存服务除此无任何依赖
代码
#region AuthorInfo
// Author: sjx
// Date: 2023-08-10 16:22
#endregion
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;
using Microsoft.Extensions.Caching.Memory;
namespace Api_Limit.Controllers;
[ApiController]
[Route("[controller]/[action]")]
public class UserAuthorController : ControllerBase
{
#region Ctor
public UserAuthorController(IMemoryCache memoryCache)
{
// 注入缓存,并设置缓存
LimitUserLogin.MemoryCache = memoryCache;
}
#endregion
#region Action
#region 登录
[AllowAnonymous]
[HttpPost(Name = "UserLogin")]
public string UserLogin(UserLogInfo input)
{
LimitUserLogin.FailCount = 5;
LimitUserLogin.LockTime = 30;
// 模拟用户数据
var userList = new List<UserLogInfo>()
{
new UserLogInfo()
{
Account = "admin",
Password = "123456"
},
new UserLogInfo()
{
Account = "user",
Password = "123456"
},
new UserLogInfo()
{
Account = "test",
Password = "123456"
}
};
// 判断是否被锁定
var isLock = LimitUserLogin.IsForbidden(input.Account);
if (isLock) return "账号已被锁定,请30分钟后再试";
// 验证账号密码是否正确
var user = userList.FirstOrDefault(x => x.Account == input.Account && x.Password == input.Password);
var isOk = user != null;
if (!isOk)
{
// 登录失败，计次
LimitUserLogin.SetFailCounter(input.Account);
return "账号或密码错误";
}
// 登录成功，解锁
LimitUserLogin.UnLock(input.Account);
return "登录成功";
}
#endregion
#endregion
}
/// <summary>
/// 模拟用户数据
/// </summary>
public class UserLogInfo
{
public string Account { get; set; } = string.Empty;
public string Password { get; set; } = string.Empty;
}
/// <summary>
/// 用户登录限制
/// </summary>
public static class LimitUserLogin
{
#region Field
private const string FailCountRedisKey = "login_fail_count";
private const string Separator = ":";
/// <summary>
/// 系统缓存
/// </summary>
public static IMemoryCache MemoryCache = null!;
/// <summary>
/// 锁定时间
/// </summary>
public static int LockTime = 30;
/// <summary>
/// 失败次数
/// </summary>
public static int FailCount = 5;
#endregion
#region Methods
#region 是否被锁定
/// <summary>
/// 是否被锁定
/// </summary>
/// <param name="account">用户名</param>
/// <returns></returns>
public static bool IsForbidden(string account)
{
CheckCache();
try
{
// 判断是否被锁定
return MemoryCache.TryGetValue(string.Join(Separator, FailCountRedisKey, account), out int failCount);
}
catch (Exception e)
{
Console.WriteLine(e);
}
return false;
}
#endregion
#region 登录失败计次
/// <summary>
/// 失败计次
/// </summary>
/// <param name="username">用户名</param>
public static void SetFailCounter(string username)
{
CheckCache();
// 获取当前时间
var now = DateTime.Now;
// 获取当前时间的分钟数
var minute = now.ToString("yyyyMMddHHmm");
// 登录失败次数 + 1
var key = string.Join(Separator, FailCountRedisKey, username, minute);
var count = MemoryCache.Get<int?>(key) ?? 0;
// 如果key不存在的话就会以增量形式存储进来
MemoryCache.Set(key, count + 1, TimeSpan.FromMinutes(1));
// 如果失败次数大于5次，锁定账户
var windowsKeys = new List<string>();
// 获取当前时间前10分钟的key
for (var i = 0; i < 10; i++)
{
windowsKeys.Add(string.Join(Separator, FailCountRedisKey, username, now.ToString("yyyyMMddHHmm")));
now = now.AddMinutes(-1);
}
var countList = new List<int>();
// 获取当前时间前10分钟的失败次数
foreach (var key1 in windowsKeys)
{
if (MemoryCache.TryGetValue(key1, out int count1))
{
countList.Add(count1);
}
}
// 获取当前时间前10分钟的失败次数总和
var total = countList.Sum();
// 如果失败次数大于5次，锁定账户
if (total >= FailCount)
{
Forbidden(username);
}
}
#endregion
#region 禁止登录
/// <summary>
/// 禁止登录30分钟
/// </summary>
/// <param name="account">用户名</param>
private static void Forbidden(string account)
{
CheckCache();
// 设置缓存
var key = string.Join(Separator, FailCountRedisKey, account);
// 设置30分钟过期
MemoryCache.Set(key, 1, TimeSpan.FromMinutes(LockTime));
}
#endregion
#region 解锁
/// <summary>
/// 解锁
/// </summary>
/// <param name="account">用户名</param>
public static void UnLock(string account)
{
CheckCache();
// 获取当前时间的分钟数
var minute = DateTime.Now.Minute;
var windowsKey = new List<string>();
for (var i = 0; i <= 10; i++)
{
windowsKey.Add(string.Join(Separator, FailCountRedisKey, account, DateTime.Now.Minute - i));
}
// 删除缓存
foreach (var key in windowsKey)
{
MemoryCache.Remove(key);
}
}
#endregion
#region 检查缓存是否存在
private static void CheckCache()
{
if (MemoryCache == null) throw new Exception("请先初始化MemoryCache");
}
#endregion
#endregion
}