Question

Is there a way maybe via an action filter to turn off ssl for specific methods?

Example…if someone somehow hits my Index method and has ssl on…can I redirect to the method again and turn it off?

Answer 1

Global.asax.cs

protected void Application_BeginRequest(){
    if (Context.Request.IsSecureConnection)
        Response.Redirect(Context.Request.Url.ToString().Replace("https:", "http:"));
}

You could add the same code to an action filter:

public class SSLFilter : ActionFilterAttribute {

    public override void OnActionExecuting(ActionExecutingContext filterContext){
        if (filterContext.HttpContext.Request.IsSecureConnection){
            var url = filterContext.HttpContext.Request.Url.ToString().Replace("https:", "http:");
            filterContext.Result = new RedirectResult(url);
        }
    }
}