How to check if a user is authenticated in MVC

Question

I have done custom authentication system by following this example and it works. my code is like below. I am wondering how I should control if the user is authenticated in other Actions, lets say if users goes to /Profile/Index?

I have tried HttpContext.User and User.Identity but didnt work.

[HttpPost]
public ActionResult Login(string username, string password)
{
    if (new UserManager().IsValid(username, password))
    {
        var ident = new ClaimsIdentity(
          new[] {
      new Claim(ClaimTypes.NameIdentifier, username),
      new Claim("http://schemas.microsoft.com/accesscontrolservice/2010/07/claims/identityprovider", "ASP.NET Identity", "http://www.w3.org/2001/XMLSchema#string"),
      new Claim(ClaimTypes.Name,username)
          },
          DefaultAuthenticationTypes.ApplicationCookie);

        HttpContext.GetOwinContext().Authentication.SignIn(
           new AuthenticationProperties { IsPersistent = false }, ident);
        return RedirectToAction("MyAction"); // auth succeed 
    }
    ModelState.AddModelError("", "invalid username or password");
    return View();
}

this is my Global.asax

protected void Application_Start()
{
    AreaRegistration.RegisterAllAreas();
    FilterConfig.RegisterGlobalFilters(GlobalFilters.Filters);
    RouteConfig.RegisterRoutes(RouteTable.Routes);
    BundleConfig.RegisterBundles(BundleTable.Bundles);
}

What does User.Identity.IsAuthenticated returns after logging in and moving to /Profile/Index? — Ali Baig
– Ali Baig, Commented Jan 28, 2017 at 1:09
Have you tried HttpContext.GetOwinContext().Authentication.User.Identity.IsAuthenticted? — DavidG
– DavidG, Commented Jan 28, 2017 at 1:11
And on Profile controller, it passes through the [Authorize] attribute but returns false on IsAuthenticated? — Ali Baig
– Ali Baig, Commented Jan 28, 2017 at 1:15

DavidG · Accepted Answer · 2017-01-28 01:41:43Z

2

You are not setting up authentication in your Owin pipeline. The easiest way is to add a file like the one below. Call it IdentityConfig.cs and put it in the App_Start folder:

using Microsoft.AspNet.Identity;
using Microsoft.Owin;
using Microsoft.Owin.Security.Cookies;
using Owin;

//This line tells Owin which method to call
[assembly: OwinStartup(typeof(TokenBasedAuthenticationSample.IdentityConfig))]
namespace TokenBasedAuthenticationSample
{
    public class IdentityConfig
    {
        public void Configuration(IAppBuilder app)
        {
            //Here we add cookie authentication middleware to the pipeline 
            app.UseCookieAuthentication(new CookieAuthenticationOptions
            {
                AuthenticationType = DefaultAuthenticationTypes.ApplicationCookie,
                LoginPath = new PathString("/Account/login"),
            });
        }
    }
}

answered Jan 28, 2017 at 1:41

DavidG

120k13 gold badges232 silver badges239 bronze badges

Sign up to request clarification or add additional context in comments.

7 Comments

Arif YILMAZ Over a year ago

it cannot find UseCookieAuthentication

DavidG Over a year ago

Did you add the using statements as above? Do you have the Microsoft.Owin.Security.Cookies package installed?

Arif YILMAZ Over a year ago

I added it, but when it goes to MyAction, claim seems empty

DavidG Over a year ago

Does the action have the Authorize attribute?

Arif YILMAZ Over a year ago

no I dont, but I just added it. now, it goes to default login page.

|

Collectives™ on Stack Overflow

How to check if a user is authenticated in MVC

1 Answer 1

7 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

7 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related