Question

I’m trying to get my MVC3 site to redirect from HTTPS back to HTTP when the user browses to a page where it’s not required (and they aren’t logged in). I Don’t want to have the load of running the whole site HTTPS but it’s looking like thats the way I’ll have to go.

I’ve been having loads of trouble with remote debug and symbols, but having gone back in time to 1985 and using message box equivalents to debug with I’ve come to the following conclusion:

if (filterContext.ActionDescriptor
     .GetCustomAttributes(typeof(RequireHttpsAttribute), true)
     .Any()
   )
{
   return true;
}
return false;

Always returns false.

The controller def starts as:

[FilterIP(
    ConfigurationKeyAllowedSingleIPs = "AllowedAdminSingleIPs",
    ConfigurationKeyAllowedMaskedIPs = "AllowedAdminMaskedIPs",
    ConfigurationKeyDeniedSingleIPs = "DeniedAdminSingleIPs",
    ConfigurationKeyDeniedMaskedIPs = "DeniedAdminMaskedIPs"
)]
[RequireHttps]
public class AccountController : Controller
{

And it doesn’t seem to work for any actions in this controller (although they do get successfully routed to SSL).

Any suggestions? I’d love to see an answer for what I perceive as my own nubery 😉

Answer 1

My problem was discovered to be related to the bindings on the server published to. We use the same server for stage and production, and the stage https bindings were not set, so whenever it was calling an https page it was resolving into our production site (which looked the same so it was hard to spot).

Once I added a binding it was all solved. My code was ok…