How to pass data from an AuthorizeAttribute to the Controller using webapi 2?

Question

I have created a custom AuthorizeAttribute which verifies some OAuth credentials of user.

Once I got valid user I want to return response data to controller how can I achieve this in web api .net.

public class CustomAttribute : AuthorizeAttribute
{
    protected override bool IsAuthorized(HttpActionContext actionContext)
    {
        var response = mydata.Result.Content.ReadAsStringAsync();
        if (mydata.Result.StatusCode == HttpStatusCode.OK)
        {
            // return response data to controller
            return true;
        }
    }
}

I searched I got in mvc it can be done like below.

public class CustomAttribute : AuthorizeAttribute
{
   public string BlackListedUsers { get; set; }
   protected override bool AuthorizeCore(AuthorizationContext filterContext)
   {
     filterContext.HttpContext.Items["test"] = "foo";
     return true;
   }
}

In controller -

_yourVariable = HttpContext.Items["test"];

How can I achieve this in System.Web.Http in web api because in webapi i do not have method AuthorizeCore and input parameter AuthorizationContext?

in webapi i do not have method AuthorizeCore and input parameter AuthorizationContext — Neo
– Neo, Commented Jul 18, 2017 at 8:54

Souvik Ghosh · Accepted Answer · 2017-07-18 09:22:53Z

6

This approach can work but not recommended.

Inside your IsAuthorized function-

protected override bool IsAuthorized(HttpActionContext actionContext)
{
    var response = mydata.Result.Content.ReadAsStringAsync();
    if (mydata.Result.StatusCode == HttpStatusCode.OK)
    {
        string someValue = "any value";
        actionContext.Request.Properties.Add(new KeyValuePair<string, object>("YourKeyName", someValue));
        return true;
    }
}

The someValue can be string, int or any custom object as you want.

In controller you retrieve like this-

object someObject;
Request.Properties.TryGetValue("YourKeyName", out someObject);

edited Jul 18, 2017 at 9:22

answered Jul 18, 2017 at 9:16

Souvik Ghosh

4,63713 gold badges60 silver badges84 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Dr T Over a year ago

Is actionContext.Request.Properties per-user? I mean if two users set it at the same time to different values, then what happens?

Souvik Ghosh Over a year ago

Yes, Request properties are user specific

DomeTune · Accepted Answer · 2017-07-18 09:25:30Z

4

In Web API 2.0 HttpActionContext.Request.Properties is equivalent to AuthorizationContext .HttpContext.Items. Consequently you can add an item to the properties and get it in your controller by Request.Properties["keyName"].

public class CustomAttribute : AuthorizeAttribute
{
    protected override bool IsAuthorized(HttpActionContext actionContext)
    {
        var response = mydata.Result.Content.ReadAsStringAsync();
        if (mydata.Result.StatusCode == HttpStatusCode.OK)
        {
            actionContext.Request.Properties["keyName"] = keyValue;
            return true;
        }
    }
}

answered Jul 18, 2017 at 9:25

DomeTune

1,44111 silver badges22 bronze badges

Comments

tlt · Accepted Answer · 2017-07-18 09:28:49Z

1

If you have, for example, MyController with property MyProperty defined on that controller, then in authorize you might have something like:

(filterContext.Controller as MyController).MyProperty= "any value";

and within your controller you just normally access MyProperty

answered Jul 18, 2017 at 9:28

tlt

15.5k11 gold badges54 silver badges104 bronze badges

Comments

Yitzhak Weinberg · Accepted Answer · 2019-02-14 05:33:28Z

0

I use Code Like this

 protected override bool AuthorizeCore(System.Web.Http.Controllers.HttpActionContext actionContext)
        {
            BaseApiController Controller = actionContext.ControllerContext.Controller as BaseApiController;
            baseApi.Property = 10;
            return Controller.IsAuthorize();
        }

answered Feb 14, 2019 at 5:33

Yitzhak Weinberg

2,6221 gold badge22 silver badges22 bronze badges

Collectives™ on Stack Overflow

How to pass data from an AuthorizeAttribute to the Controller using webapi 2?

4 Answers 4

2 Comments

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

2 Comments

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related