Authorized some controller in ASP.NET MVC

Question

User1642350797 posted

I want to some controller restrict to access by anonymous users. But only registered users can access. When unauthorized users want to access this controller they will redirect to login page. 

Please anyone help me ...........

Best Regards,

Wali

Answer 1

User-691209617 posted

use [Authorize] attribute and extend the ActionFilterAttribute in a class for redirecting to login page on OnActionExecuting.

Code for SessionExpire

 [AllowAnonymous]
 public class SessionExpire : ActionFilterAttribute
    {
        public override void OnActionExecuting(ActionExecutingContext filterContext)
        {
            if (HttpContext.Current.Session["User"] == null)
            {
                filterContext.Result = new RedirectResult("~/Account/Login");
                return;
            }

            base.OnActionExecuting(filterContext);
        }
    }

and in controller do this

[SessionExpire]
[Authorize]
public class MatchesController : Controller
{
    //..code goes here
}

Answer 2

User-2057865890 posted

Hi Wali,

[AllowAnonymous] //This is for Un-Authorize User
public ActionResult Index()
{
    return View();
}

[Authorize] // This is for Authorize user
public ActionResult MyProfile()
{
    return View();
}

reference:

http://www.dotnetcurry.com/aspnet-mvc/957/aspnet-mvc-authentication-filters
http://www.c-sharpcorner.com/UploadFile/56fb14/custom-authorization-in-mvc/
http://www.dotnetawesome.com/2015/06/how-to-implement-custom-forms-authentication-in-aspnet-mvc.html

Best Regards,

Chris