<%@ WebHandler Language="C#" Class="Alisoft" %>

using System;
using System.Web;
using System.Net;
using System.Xml;
using System.Text;
using System.Web.Security;
using System.Collections.Generic;

public class Alisoft : IHttpHandler {
    
    public void ProcessRequest (HttpContext context) {

        //1.应用信息

        string sip_appkey = "12345";
        string cert_code = "6c0a91f01a5411dd8179bad18f04aace";

        //2.参数集

        SortedList<string, string> parameters = new SortedList<string, string>();

        //2.1 应用级输入参数
        parameters.Add("userId", context.Request["user_id"]);
        parameters.Add("appInstanceId", context.Request["app_instance_id"]);
        parameters.Add("token", context.Request["token"]);

        //2.2 系统级参数
        parameters.Add("sip_appkey", sip_appkey);
        parameters.Add("sip_apiname", "alisoft.validateUser");
        parameters.Add("sip_timestamp", DateTime.Now.ToString("yyyy-MM-dd HH:mm:ss"));

        //2.3 生成sip_sign,格式: cert_code参数1值1参数2值2,生成md5后转为大写
        StringBuilder sb = new StringBuilder();
        sb.Append(cert_code);
        foreach (KeyValuePair<string, string> item in parameters)
        {
            sb.Append(item.Key + item.Value);
        }
        parameters.Add("sip_sign", FormsAuthentication.HashPasswordForStoringInConfigFile(sb.ToString(), "MD5").ToUpper());

        //3.生成url
        string url = "http://sipdev.alisoft.com/sip/rest?";//线上环境: http://sip.alisoft.com/sip/rest  测试环境: http://sipdev.alisoft.com/sip/rest
        StringBuilder query = new StringBuilder();
        foreach (KeyValuePair<string, string> item in parameters)
        {
            query.Append(item.Key + "=" + System.Web.HttpUtility.UrlEncode(item.Value, System.Text.Encoding.UTF8) + "&");
        }
        url += query.ToString().TrimEnd(new char[] { '&' });
      
        //验证用户身份
        try
        {
            WebRequest webRequest = WebRequest.Create(new Uri(url));
            webRequest.ContentType = "application/x-www-form-urlencoded";
            webRequest.Method = "POST";
            webRequest.Timeout = 5000;
            XmlDocument xmlDocument = new XmlDocument();
            xmlDocument.Load(((WebResponse)webRequest.GetResponse()).GetResponseStream());

            //<?xml version="1.0" encoding="utf-8" ?><String>0</String>
            switch (xmlDocument.SelectSingleNode("//String").InnerText)
            {
                case "1":
                    context.Response.Write("应用的订购者");
                    break;
                case "0":
                    context.Response.Write("应用的使用者");
                    break;
                case "-1":
                    context.Response.Write("尚未订购该应用");
                    break;
                case "-2":
                    context.Response.Write("非法用户");
                    break;
                default:
                    context.Response.Write("非法用户");
                    break;
            }
        }
        catch (Exception ex)
        {
            context.Response.Write(ex.Message);
        }

    }

    public bool IsReusable {
        get {
            return false;
        }
    }

}