MVC 5 Authorize Attribute

Question

I am using MVC 5 for ASP.NET.

I am trying to create a custom authorize attribute. Users are authenticated to my application, using OpenId and if a session variable exists. I have added the [OpenIdAuthorize] to my controllers. When I view them after sign in, I get bounced back to /openid/index in my application. The session variable exists. I added breakpoints, but they are never reached.

public class OpenIdAuthorizeAttribute : System.Web.Mvc.AuthorizeAttribute
{

    protected override bool AuthorizeCore(HttpContextBase httpContext)
    {
        if (httpContext.Session["FriendlyEmail"] == null)
            return false;
        else
            return true;
    }

    protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext)
    {
        if(filterContext.HttpContext.Session["FriendlyEmail"] == null)
            filterContext.Result = new RedirectResult("/openid/index");
    }
}

Here is my controller:

[OpenIdAuthorize]
public class RuleSetController : Controller

Does any breakpoints on AuthorizeCore function getting hit? — S.Dav
– S.Dav, Commented Jun 15, 2017 at 14:52
Is the normal AuthorizeAttribute still active? It might have been added as a global filter in FilterConfig? — rickvdbosch
– rickvdbosch, Commented Jun 15, 2017 at 14:52
When I add it to filter config, the code does run. As soon as the user accesses my app, it tries to redirect them. Can I add code to make authorize happen on certain pages? — Joseph Anderson
– Joseph Anderson, Commented Jun 15, 2017 at 15:31

Joseph Anderson · Accepted Answer · 2017-06-16 18:12:06Z

1

Here is my solution:

Do not enter anything in filter.config.
In the web.config, enter this code: (see authentication mode > forms https://support.microsoft.com/en-us/help/301240/how-to-implement-forms-based-authentication-in-your-asp.net-application-by-using-c-.net)

Adjust the AuthorizeAttribute to only override AuthorizeCore. Override no other methods.

protected override bool AuthorizeCore(HttpContextBase httpContext)
{
    if (httpContext.Session["FriendlyEmail"] == null)
        return false;
    else
        return true;
}

answered Jun 16, 2017 at 18:12

Joseph Anderson

4,1644 gold badges48 silver badges102 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

MVC 5 Authorize Attribute

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related