Question

I’m running a mvc web application with Form Authentication in my company.

For convenience reason, I want to allow people in the same intranet to access this web app without login.

Is there a way to skip the login page based on the UserHostAddress ?

Answer 1

You could write a custom AuthorizeAttribute for this purpose:

public class CustomAuthorizeAttribute : AuthorizeAttribute
{
    protected override bool AuthorizeCore(HttpContextBase httpContext)
    {
        if (IsIntranetAddress(httpContext.Request.UserHostAddress))
        {
            return true;
        }
        return base.AuthorizeCore(httpContext);
    }

    private bool IsIntranetAddress(string ip)
    {
        throw new NotImplementedException();
    }
}

and then decorate the controllers/actions which would normally require authentication with this attribute:

[CustomAuthorize]
public ActionResult Foo()
{
    ...
}