Question

I can successfully make a POST via ajax to a controller that has an [Authorize] attribute and pass in an array (JSON encoded).

When I make the same request with a large array (around 3,000) numeric Ids, I immediately get a 401 returned by the Authorize attribute and the action method never gets executed.

Why would a large payload affect the Authorization attribute?

Answer 1

You’ll want to add this to your web.config

 <system.web>
    <httpRuntime maxRequestLength="2097151" executionTimeout="1200" />

as you could well be over the default limit (4mb), above sets it to 2gb