c# - 文件上传后服务堆栈 session 丢失

Question

我们使用 Service Stack 创建了一个小型网站，但遇到了用户上传问题。我们发现，当用户使用 POST 上传文件时，他们的 session 已关闭。

文件的大小似乎无关紧要，响应上传 POST 的延迟也无关紧要。

我已确认浏览器在上传前后仍在发送相同的 session ID (ss-id) cookie。

这是我们处理 AAA 的方式:

public override void Configure(Container container)
{
    //Config examples
    //this.Plugins.Add(new PostmanFeature());
    //this.Plugins.Add(new CorsFeature());            
    ServiceStack.Text.JsConfig.DateHandler = ServiceStack.Text.DateHandler.ISO8601; 

    Plugins.Add(new AuthFeature(() => new AuthUserSession(),
        new IAuthProvider[] {
            new FeedPartnerAuthProvider(), //Custom MSSQL based auth
        }
    ));

    //Global response filter to extend session automatically
    this.GlobalResponseFilters.Add((req, res, requestDto) =>
    {
        var userSession = req.GetSession();
        req.SaveSession(userSession, slidingExpiryTimeSpan);
    });

    this.Plugins.Add(new RazorFormat());
}

上传代码如下所示:

//Upload Test Models
[Route("/upload", "POST")]
public class PostUpload : IReturn<PostUploadResponse>
{
    public String Title { get; set; }
}
public class PostUploadResponse
{
    public String Title { get; set; }
    public Boolean Success { get; set; }
}

//Upload Test Service
[Authenticate]
public object Post(PostUpload request)
{
    string uploadPath = "~/uploads";
    Directory.CreateDirectory(uploadPath.MapAbsolutePath());

    var customerFile = Request.Files.SingleOrDefault(uploadedFile =>
        uploadedFile.ContentLength > 0 &&
        uploadedFile.ContentLength <= 500 * 1000 * 1024);

    if (customerFile == null)
        throw new ArgumentException("Error: Uploaded file must be less than 500MB");

    //determine the extension of the file
    String inputFileExtension = "";
    var regexResult = Regex.Match(customerFile.FileName, "^.*\\.(.{3})$");
    if (regexResult.Success)
        inputFileExtension = regexResult.Groups[1].Value;

    if (inputFileExtension.Length == 0)
        throw new Exception("Error determining extension of input filename.");

    //build a temporary location on the disk for this file
    String outputFilename = "{0}/{1}.{2}".FormatWith(uploadPath, Guid.NewGuid(), inputFileExtension).MapAbsolutePath();
    if (File.Exists(outputFilename))
        throw new Exception("Unable to create temporary file during upload.");

    //Get some information from the session
    String ownerId = "Partner_" + this.GetSession().UserAuthId;

    //Write the temp file to the disk and begin creating the profile.                        
    try
    {
        //Move the file to a working directory.
        using (var outFile = File.OpenWrite(outputFilename))
        {
            customerFile.WriteTo(outFile);
        }

    }
    catch (Exception ex)
    {
        throw new Exception("Error creating profile with uploaded file. ", ex);
    }
    finally
    {
        //Clean up temp file no matter what
        try { File.Delete(outputFilename); }
        catch (Exception delException) { }
    }

    return new PostUploadResponse
    {
        Title = request.Title,
        Success = true
    };
}

文件上传成功，响应正确传回浏览器，但后续调用任何服务都会收到 302 重定向到/login，即使正确的 ss-id 和 sp-pid作为请求的一部分传输。

每当我上传文件时，是什么导致我的用户 session 结束？

非常感谢!

-Z

Answer 1

好吧，我解决了这个问题:

这里发生的事情是用户上传的文件最终在/bin/uploads 而不是/uploads。每当/bin 的内容更改时，App Domain 都会重新启动，从而使 session 无效。

此实例中的错误是我使用 .MapAbsolutePath() 而不是 .MapServerPath()