Question

I’ve integrated some pages written in ASP.NET MVC 2, into a classic webform app.
Everything works well except the authentication system.

The authentication system is using some token added to the url like :

/Account/Profil/Details.aspx?AUTHID=2ddc098a-cf0b-fd81-afb7-d41f35010b9f

When i reach my asp.net mvc pages (all these pages must be secured), they must include that AUTHID parameter.

I’m using the core Webform control to secure the pages, and this control check for the AUTHID token in the url. So basicly my route must include the

?AUTHID=2ddc098a-cf0b-fd81-afb7-d41f35010b9f

What the best and clever way to do this ?
I don’t want to pass the AUTHID parameter manually in all controller actions.
Thanks for your help.

Answer 1

You can save the AuthId in the Session object and create a custom Authorize Attribute.

Attribute

public class CustomAuthorize : AuthorizeAttribute
{
    protected override bool AuthorizeCore(HttpContextBase httpContext)
    {
        // your custom logic depending on Session["AuthId"]
        return httpContext.Session["AuthId"] != null;
    }
}

Controller

public class MyController : Controller
{
    [CustomAuthorize]
    public ActionResult MyActionMethod()
    {
        return View();
    }
}

hope this helps