WebApi用JilFormatter处理客户端序列化的字符串加密，之后在服务端解析。

using Jil;
using OLW.Common.Helpers;
using System;
using System.Collections.Generic;
using System.IO;
using System.Linq;
using System.Net;
using System.Net.Http.Formatting;
using System.Net.Http.Headers;
using System.Reflection;
using System.Text;
using System.Threading.Tasks;
using System.Web;
using System.Xml.Serialization;

namespace WxPayWebApi.Common
{
    public class JilFormatter : MediaTypeFormatter
    {
        private readonly Options _jilOptions;
        private MethodInfo _method;

        public JilFormatter()
        {
            //要序列化的时间格式
            _jilOptions = new Options(dateFormat: DateTimeFormat.ISO8601);
            //媒体类型
            SupportedMediaTypes.Add(new MediaTypeHeaderValue("application/test"));
            //加入 UTF8Encoding 编码
            SupportedEncodings.Add(new UTF8Encoding(encoderShouldEmitUTF8Identifier: false, throwOnInvalidBytes: true));
            //加入 UnicodeEncoding 编码
            SupportedEncodings.Add(new UnicodeEncoding(bigEndian: false, byteOrderMark: true, throwOnInvalidBytes: true));

        }
        //判断是否反序列化类型
        public override bool CanReadType(Type type)
        {
            if (type == null)
            {
                throw new ArgumentNullException("type");
            }
            return true;
        }
        //判断是否序列化类型
        public override bool CanWriteType(Type type)
        {
            if (type == null)
            {
                throw new ArgumentNullException("type");
            }
            return true;
        }

        //  异步反序列化一个指定类型的对象。
        public override Task<object> ReadFromStreamAsync(Type type, Stream readStream, System.Net.Http.HttpContent content, IFormatterLogger formatterLogger)
        {
            return Task.FromResult(DeserializeFromStream(type, readStream));
        }

        private object DeserializeFromStream(Type type, Stream readStream)
        {
            try
            {
                StreamReader sr = new StreamReader(readStream);
                string text = sr.ReadToEnd();
                string s = EncrypAndDecrypHelper.Decrypt(text);

                using (StringReader ssr = new StringReader(s))
                {
                    XmlSerializer xmldes = new XmlSerializer(type);
                    return xmldes.Deserialize(ssr);
                }


                //using (var reader = new StreamReader(readStream))
                //{
                    //return JSON.Deserialize(reader, type, _jilOptions);
                //}
            }
            catch
            {
                return null;
            }
        }

        //  异步序列化一个指定类型的对象。
        public override Task WriteToStreamAsync(Type type, object value, Stream writeStream, System.Net.Http.HttpContent content, TransportContext transportContext)
        {
            var streamWriter = new StreamWriter(writeStream);
            JSON.Serialize(value, streamWriter, _jilOptions);
            streamWriter.Flush();
            return Task.FromResult(writeStream);
        }
    }
}

    　　 private object DeserializeFromStream(Type type, Stream readStream)
        {
            try
            {
                StreamReader sr = new StreamReader(readStream);
                string text = sr.ReadToEnd();
                string s = EncrypAndDecrypHelper.Decrypt(text);

                using (StringReader ssr = new StringReader(s))
                {
                    XmlSerializer xmldes = new XmlSerializer(type);
                    return xmldes.Deserialize(ssr);
                }
            }
            catch
            {
                return null;
            }
        }

   public static class WebApiConfig
    {
        public static void Register(HttpConfiguration config)
        {
            // Web API 配置和服务
            // 将 Web API 配置为仅使用不记名令牌身份验证。
            config.SuppressDefaultHostAuthentication();
            config.Filters.Add(new HostAuthenticationFilter(OAuthDefaults.AuthenticationType));

            //GlobalConfiguration.Configuration.Formatters;
            //config.Formatters.Clear();
            //config.Formatters.Add(new CustomNamespaceXmlFormatter());

            var json = GlobalConfiguration.Configuration.Formatters.JsonFormatter;
            Console.WriteLine(json);
            json.UseDataContractJsonSerializer = true;

            var xml = GlobalConfiguration.Configuration.Formatters.XmlFormatter;
            xml.UseXmlSerializer = true;

            GlobalConfiguration.Configuration.Formatters[0] = new JilFormatter();

            // Web API 路由
            config.MapHttpAttributeRoutes();

            config.Routes.MapHttpRoute(
                name: "DefaultApi",
                routeTemplate: "api/{controller}/{id}",
                defaults: new { id = RouteParameter.Optional }
            );


            
        }
    }