HandleUnauthorizedRequest vs OnActionExecuting [Answered]RSS

• • Reply
  neoaguil17

  Member

  169 Points

  574 Posts

  HandleUnauthorizedRequest vs OnActionExecuting

  Mar 01, 2019 04:13 AM|neoaguil17|LINK

  Hi

  I overwrite both methods, but.. What is the first method executed by ASP MVC.

  This is my code:

   public class AccessAttribute : ActionFilterAttribute
      {
          public string Permiso { get; set; }
  
          public override void OnActionExecuting(ActionExecutingContext filterContext)
          {
              if (!FacadeSession.ValidarPermiso(Permiso))
              {
                  if (filterContext.HttpContext.Request.IsAjaxRequest())
                  {
                      filterContext.HttpContext.Response.Clear();
                      filterContext.HttpContext.Response.StatusCode = (int)HttpStatusCode.Forbidden;
                      filterContext.Result = new JsonResult()
                      {
                          Data = new { status = (int)HttpStatusCode.Forbidden },
                          JsonRequestBehavior = JsonRequestBehavior.AllowGet
                      };
                  }
                  else
                  {
                      filterContext.Result = new RedirectToRouteResult(
                          new RouteValueDictionary {
                          { "action", "PrivilegiosInsuficientes" },
                          { "controller", "AccesoDenegado" },
                      });
                  }                
              }
          }
      }
  
   public class RepAuthorizationAttribute : AuthorizeAttribute
      {
          private RedirectToRouteResult RedirectoToUnauthorizedPageResult = new RedirectToRouteResult(new RouteValueDictionary {
                  { "action", "index" },
                  { "controller", "AccesoDenegado" }
              });
  
          protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext)
          {            
              if (!filterContext.HttpContext.User.Identity.IsAuthenticated)
              {
                  var result = RedirectoToUnauthorizedPageResult;
                  var errorMsg = ResMessages.ContenidoErrorAutenticacion_RequiereAutenticarse;
                  if (FacadeSession.Usuario != null)
                  {
                      result.RouteValues["action"] = "SesionExpirada";
                      errorMsg = ResMessages.ContenidoErrorAutenticacion_SesionCulminada;
                  }                                       
                  FacadeSession.ClearCookie();
                  filterContext.HttpContext.Response.Clear();                
                  if (filterContext.HttpContext.Request.IsAjaxRequest())
                  {                    
                      filterContext.Result = new JsonResult()
                      {
                          Data = new
                          {
                              status = (int)HttpStatusCode.Unauthorized,
                              errMsg = errorMsg
                          },
                          JsonRequestBehavior = JsonRequestBehavior.AllowGet
                      };
                      filterContext.HttpContext.Response.StatusCode = (int)HttpStatusCode.Conflict;
                      filterContext.HttpContext.Response.SuppressFormsAuthenticationRedirect = true;
                  }
                  else
                      filterContext.Result = result;
              }
          }
      }

• • Reply
  Yuki Tao

  Contributor

  2890 Points

  1169 Posts

  Re: HandleUnauthorizedRequest vs OnActionExecuting

  Mar 01, 2019 09:00 AM|Yuki Tao|LINK

  Hi neoaguil17,

  Do you mean which method do you enter first?

  According to your code,I put  [RepAuthorization(Roles = "Admin")] and [Access] on one action.

  HandleUnauthorizedRequest is executed first than OnActionExecuting in my demo.

  I suggest you could add breakpoints on your code and check these filter.

  Best Regards.

  Yuki Tao

  MSDN Community Support
  Please remember to click "Mark as Answer" the responses that resolved your issue.
  If you have any compliments or complaints to MSDN Support, feel free to contact MSDNFSF@microsoft.com.