Question

I just want to ensure they are logged in before running any code.

I found User.Identity.IsAuthenticated Which can be used for boolean to check login. But if I did redirect, it would still run code, plus I would have to put it everywhere?

In ROR there was a before_filter option we did, that checked at the top of each controller, and wouldnt run it otherwise.

Please can someone guide me on how to do this.

Answer 1

You can use AuthorizeAttribute for this:

When you mark an action method with AuthorizeAttribute, access to that
action method is restricted to users who are both authenticated and
authorized. If you mark a controller with the attribute, all action
methods in the controller are restricted.

The Authorize attribute lets you indicate that authorization is
restricted to predefined roles or to individual users. This gives you
a high degree of control over who is authorized to view any page on
the site.

If an unauthorized user tries to access a method that is marked with
the Authorize attribute, the MVC framework returns a 401 HTTP status
code. If the site is configured to use ASP.NET forms authentication,
the 401 status code causes the browser to redirect the user to the
login page.

For example:

[Authorize]
public ActionResult DoSomething()
{
    // ...
}