/// <summary>
    /// 功(gong)能(neng)：api數(shu)據安全(quan)性驗證(zheng)
    /// 校驗方(fang)式(shi)：ciphertext=md5(form鍵的(de)值拼接(jie)(jie)+timestamp+passkey),服務端用接(jie)(jie)收到(dao)的(de)表單(dan)數據與時間戳和自己的(de)passkey進行md5生成，最(zui)后比較值是否一(yi)致(zhi)
    /// passkey為私鑰，不用(yong)于(yu)網(wang)絡傳遞(di)，你(ni)可以將它(ta)與appKey進行關聯，appKey用(yong)來傳遞(di)，服務器(qi)根據appKey去(qu)數據庫里取(qu)對應的passkey然后進行比較
    /// 功(gong)能：請求唯一性，防偽造性
    /// timestamp:UTC時(shi)間(jian)(jian)戳，不用于(yu)網(wang)絡傳遞，在(zai)客戶(hu)端調用服(fu)務器(qi)(qi)時(shi)，服(fu)務器(qi)(qi)也生成yyyyMMddhhmmss的時(shi)間(jian)(jian)戳，然后進行計(ji)算，看是否(fou)過期(qi)
    /// </summary>
    [AttributeUsage(AttributeTargets.Method)]
    public class ApiValidateFilter : ActionFilterAttribute
    {
        public override void OnActionExecuting(System.Web.Http.Controllers.HttpActionContext actionContext)
        {
            #region 初始化
            var context = (HttpContextBase)actionContext.Request.Properties["MS_HttpContext"];//獲取傳統context
            var request = context.Request;//定義傳統request對象
            var paramStr = new StringBuilder();
            var coll = new NameValueCollection();
            if (request.HttpMethod.ToLower() == "get")
                coll = request.QueryString;
            else
                coll = request.Form;
            #endregion

            #region 解析XML配置文件
            var config = CacheConfigFile.ConfigFactory.Instance.GetConfig<ApiValidateModelConfig>().ApiValidateModelList.FirstOrDefault(i => i.AppKey == coll["AppKey"]);
            if (config == null)
            {
                actionContext.Response = new HttpResponseMessage(HttpStatusCode.Forbidden)
                {
                    Content = new StringContent("AppKey不是合并的，請先去組(zu)織生成有(you)效的Key", Encoding.GetEncoding("UTF-8"))
                };
                base.OnActionExecuting(actionContext);
            }
            if (config.ExpireDate < DateTime.Now)
            {
                actionContext.Response = new HttpResponseMessage(HttpStatusCode.Forbidden)
                {
                    Content = new StringContent("AppKey不(bu)是合并的，密鑰已過期", Encoding.GetEncoding("UTF-8"))
                };
                base.OnActionExecuting(actionContext);
            }
            #endregion

            #region 驗證算法
            var keys = new List<string>();
            foreach (string param in coll.Keys)
            {
                if (!string.IsNullOrEmpty(param))
                {
                    keys.Add(param.ToLower());
                }

            }
            keys.Sort();
            foreach (string p in keys)
            {
                if (p != "ciphertext")
                {
                    if (!string.IsNullOrEmpty(coll[p]))
                    {
                        paramStr.Append(coll[p]);
                    }

                }
            }
            paramStr.Append(DateTime.Now.ToUniversalTime().ToString("yyyyMMddHHmmss"));
            paramStr.Append(config.PassKey);
            #endregion


            if (Lind.DDD.Utils.Encryptor.Utility.EncryptString(paramStr.ToString(), Lind.DDD.Utils.Encryptor.Utility.EncryptorType.MD5)
                != request["cipherText"])
            {

                actionContext.Response = new HttpResponseMessage(HttpStatusCode.Forbidden)
                {
                    Content = new StringContent("驗證失敗，請求非(fei)法", Encoding.GetEncoding("UTF-8"))
                };
            }

            base.OnActionExecuting(actionContext);
        }
    }