asp.net mvc 401 Unauthorized error after redirect

Question

I'm getting the 401 Unauthorized error after user is redirected.

User is being redirected to another page after a new user created.

public ActionResult SaveUser(UserViewModel userViewModel)
{
    ModelState.Remove("IsDSA");
    ModelState.Remove("IsAccountRepresentative");

    var savedUser = SaveOrUpdateUser(ref userViewModel);

    TempData["Status"] = ViewBag.Status;
    TempData.Keep("Status");

    var MenuId = Request.QueryString["MenuID"];

    TempData["MenuId"] = MenuId;
    TempData.Keep("MenuId");

    if (userViewModel.AddAnotherUserRequseted && savedUser != null)
    {

        return RedirectToAction("CreateNewUser", new { MenuID = Request.QueryString["MenuID"] });
    }

    return RedirectToAction("UserAccessManagement", "UserAccessManagement", new { MenuID = Request.QueryString["MenuID"] });
}

public ActionResult UserAccessManagement(string TabName, long MenuID)
{
    ...
}

How can I fix this error? Maybe the reason is that authentication cookies are not sent with the redirect?

Have you got any [Authorize] attributes on the controller? Is the user calling SaveUser auth'd? — scgough
– scgough, Commented Jan 8, 2020 at 9:00
@scgough no attributes on the controller, user calling the SaveUser authorized — ProgBlogger
– ProgBlogger, Commented Jan 8, 2020 at 9:18

Alpesh Vaghela · Accepted Answer · 2020-01-08 09:26:27Z

2

It is because you forget Authorize attribute on controller

[Authorize]
public class UserAccessManagement: Controller {
    public ActionResult Index() {
        return View();
    }
}

edited Jan 8, 2020 at 9:26

answered Jan 8, 2020 at 9:20

Alpesh Vaghela

1074 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

ProgBlogger Over a year ago

Added the Authorize attribute but it's still not working. BTW Authorize Attribute added to the global filters

Alpesh Vaghela Over a year ago

What is your actual scenario ? Are you adding new user and that newly added user will access the web ?

ProgBlogger Over a year ago

The scenario is user adds a new user and returns on either create page or page with users list. I guess what the new user will do is not relevant to the redirect error

Alpesh Vaghela Over a year ago

okay, can you please convert MenuID to long and then pass to your new method. Hope it will works

ProgBlogger · Accepted Answer · 2020-01-08 15:01:49Z

So after a full day of investigation I started to doubt that reason may be in the Authorize Attribute or global filters and began thinking that maybe IIS somehow returns 401 on the redirect requests. But some of other actions with RedirectToAction were found by me and they worked. Besides versions hosted on another IIS had the same problem

Then I started to wonder if there is any Authorization configuration in the MVC project other then default and searched through the project "authorize" which didn't give any unexpected results

But then an idea came up to me to search through all the solution the "redirect" phrase and I finally found the root of the issue...

So on the Application_EndRequest the StatusCode is set to 401 and the error returned for the wrong type of the request

I guess searching for "401" would also help and if the constants were named they would have been found earlier

Collectives™ on Stack Overflow

asp.net mvc 401 Unauthorized error after redirect

2 Answers 2

4 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

4 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related