User-1297497848 posted
Hello,
After investigation, i think i found the reason why it doesn't work.
I recreate my application from scratch and test it after i add a new class (copy/paste from the actual App).
For the simple authentication (using email + password), i use two class :
SessionManager.cs and AuthorizationManager.cs
using System;
using System.Collections.Generic;
using System.Linq;
using System.Net;
using System.Web;
using System.Web.Mvc;
using vCenterManager.DAL;
using vCenterManager.Models.User;
namespace vCenterManager.Website.Tools
{
public class AuthorizationManager : AuthorizeAttribute
{
private List<Role> _roles = new List<Role>();
public AuthorizationManager()
{
using (vCenterManagerContext db = new vCenterManagerContext())
{
_roles = db.Roles.ToList();
}
}
public AuthorizationManager(params string[] MyRoles)
{
using (vCenterManagerContext db = new vCenterManagerContext())
{
foreach (string item in MyRoles)
{
Role _role = db.Roles.FirstOrDefault(r => r.Name.ToUpper() == item.ToUpper());
_roles.Add(_role);
}
}
}
public override void OnAuthorization(AuthorizationContext filterContext)
{
UserSession _user = SessionManager.Instance.Session;
if (_user.UserID <= 0)
{
filterContext.Result = new RedirectResult("/User/Login");
}
else if (!_roles.Any(r => r == _roles.FirstOrDefault(x => x.RoleID == _user.Role.RoleID)))
{
filterContext.Result = new HttpStatusCodeResult(HttpStatusCode.Unauthorized);
}
}
}
}
public class SessionManager
{
private const string SESSION_KEY = "LoggedUser";
#region Singleton
private static SessionManager _Instance;
public static SessionManager Instance
{
get { return _Instance ?? (_Instance = new SessionManager()); }
}
private SessionManager() { }
#endregion
public UserSession Session
{
get
{
if (HttpContext.Current.Session[SESSION_KEY] == null)
{
HttpContext.Current.Session[SESSION_KEY] = new UserSession();
}
return (UserSession)HttpContext.Current.Session[SESSION_KEY];
}
set { HttpContext.Current.Session[SESSION_KEY] = value; }
}
public bool IsAuthenticated
{
get { return Session.UserID > 0; }
}
}
Here is my HomeController
using System.Web.Mvc;
using vCenterManager.Website.Tools;
namespace vCenterManager.Website.Controllers
{
public class HomeController : Controller
{
public ActionResult Index()
{
if (!SessionManager.Instance.IsAuthenticated)
{
return RedirectToAction("Login", "User");
}
return View();
}
}
}
If i'm not authenticate, i redirect to the login page
At this time, i think it delete "HttpContext" and then the owin cookie is also deleted.
What do you think about that?
Bertrand
