CODEWITHSUNDEEP
c#asp.net-mvcauthorize-attribute
mohsinali1317
mohsinali1317

Reputation: 4425

Custom Authorize Attribute not working asp.net

In my c# app I am adding a custom attribute like this

public class CheckLogIn : AuthorizeAttribute
{
    protected override bool AuthorizeCore(HttpContextBase httpContext)
    {
        if (!httpContext.Request.IsAuthenticated)
            return false;
        return (Auth.UserLoggedIn || Auth.AdminLoggedIn);
    }
}

I am calling this attribute like this

[CheckLogIn]
public dynamic Create(String projectName, String organizationId)
{
    Project pro = Project.Create(organizationId, projectName).Save();

    return new
    {
        organizationId = pro.OrganizationId,
        name = pro.Name,
        id = pro.Id
    };
}

The AuthorizeCore is not being called. I have a break point there but it seems like it never gets called. Am I missing something here?

I have tried calling [CheckLogIn] from a regular controller it works, from an api controller it doesn't.

Upvotes: 5

Views: 5531

Answers (1)

NightOwl888
NightOwl888

Reputation: 56849

The System.Web.Http.AuthorizeAttribute for WebApi is a different type than the System.Web.Mvc.AuthorizeAttribute for MVC.

The reason why it doesn't work with WebApi is because WebApi doesn't know about MVC types. You need to create a type that inherits System.Web.Http.AuthorizeAttribute for that purpose.

Upvotes: 18

Related Questions