MVC4: When to redirect failed login

Question

I am using MVC4 with Windows Authentication for an Intranet site.

My Controllers are based on my BaseController

BaseController will call out to a service to see if the Windows user is allowed to use the site. If not, I want to redirect them to "Index" on the Controller "UnAuthorized"

Where in the BaseController would I check and then how would I redirect the request to the UnAuthorized controller?

I have tried to redirect in the OnAuthorized like this but nothing happens:

    protected override void OnAuthorization(AuthorizationContext filterContext)
    {
        base.OnAuthorization(filterContext);

        if (!isAuthorized(username))
            RedirectToAction("Index", "UnAuthorized");
    }

Are you manually calling out to this service to see if the user is authorized? If so then you redirect when you get the response back. — The Muffin Man, Nov 29 '12 at 21:40
You redirect back to your login page and notify the user that their username/password was incorrect. If they tried to access a page without being logged in then you redirect to the login page and notify the user that they must login to access the other page. — The Muffin Man, Nov 29 '12 at 21:44
Sorry, I mean, in the BaseController I check for Authentication, then in the BaseController, in what method do I call RedirectToAction? — Ian Vink, Nov 29 '12 at 21:46
I don't know, your solution seems non-standard to the built in membership. — The Muffin Man, Nov 29 '12 at 21:52

score 1 · Accepted Answer · edited May 23 '17 at 12:27

1

This answer will probably help you

Redirect Unauthorised Controller in MVC

Also This video will give you some general help

windows authentication in ASP.NET MVC 3

edited May 23 '17 at 12:27

Community

1
1

answered Nov 29 '12 at 22:13

MVCKarl

1,283
9
7

MVC4: When to redirect failed login

1 Answers1