Unauthorized Ajax Handler for Asp.net MVC

Requirements
     I need respond to users that they are unauthorized, and I need it to not return a redirect to them from a ajax call which Asp.net MVC does by default. A even better solution would be that I also do not force users to refresh page they are currently on and instead give them the ability to re-login via ajax on that current screen. This would allow users to save any  information they are currently working on. I should warn the user that it they are no longer logged in and if possible prompt them and within that same prompt allow them a way to login back in all without refreshing or a redirect. For now I'm going to just focus on the first problem which is suppressing Asp.Net's default behavior with unauthorized calls and do this just for Ajax calls.

An Example I can see while using Blogger


Solution - Thanks to Joe Harrison for missing pieces! 
//C# code override an Authorization Attribute create a customized one.
protected virtual void HandleUnauthorizedRequest(AuthorizationContext filterContext)
{
    if (filterContext.HttpContext.User.Identity.IsAuthenticated)
    {

        filterContext.Result = new HttpStatusCodeResult(403, "Forbidden");
    }
    else
    {
        // Returns HTTP 401 - Assuming they losted access while on the proper page.
        filterContext.Result = new HttpUnauthorizedResult();
        //This solution will only work on Asp.net 4.5 and update!
        if (filterContext.HttpContext.Request.IsAjaxRequest())
        {
            filterContext.HttpContext.Response.SuppressFormsAuthenticationRedirect = true;
        }
    }
}

For the Future
     Using AjaxError() Method you could create a general case for handling error with all unauthorized cases but the question I have for myself is will this be a good thing to make an assumption that all errors are unauthorized cases? Probably not else what about errors on a request? This becomes a bigger question of what should I be returning for error requests from the middle tier. I'll start on these questions before I go on implementing the Ajax Error Handler but I should also see what happens if the Ajax call itself has it's own error function as well. Will this function override the general case one or will they both take action? I believe they both will take action but I should test and see.
Update
Might do something like this: jQuery: How to get the HTTP status code from within the $.ajax.error method? - Stack Overflow


Resources
Prevent Forms Authentication Login Page Redirect When You Don’t Want It - You've Been Haacked
asp.net - How do you handle ajax requests when user is not authenticated? - Stack Overflow
jQuery.ajax() | jQuery API Documentation
HttpResponse.SuppressFormsAuthenticationRedirect Property (System.Web)
AuthorizeAttribute Class (System.Web.Mvc)
.ajaxError() | jQuery API Documentation
List of HTTP status codes - Wikipedia, the free encyclopedia
AjaxRequestExtensions.IsAjaxRequest Method (System.Web.Mvc)
Handle Ajax request with expired forms authentication, in MVC ajax.form | MVC Diary













































Popular posts from this blog









UI-Bootstrap Collapsible Sticky Footer 





















     I could have done this a lot of ways and ultimately I made it work with javascript modifying the class names. I also had to create multiple class names which I didn't like to much, I might come back and improve this but for now this is was I got. Also I call bootstrap+angularjs = ui-bootstrap, not sure if that's common sense but thought I should include it somewhere in my notes.    Working Example:  http://plnkr.co/edit/2N9ENlbw3bSvg1W9n0ch?p=preview   This little css was key to prevent any kind of animation on the collapse, which would result in a scrollbar appearing on the body. A scrollbar can appear when the content's too long but not on the sticky foot duh!   .no-animate {   transition-duration: 0.0125s; }    Research  Angular-UI Bootstrap Collapse without animation - Stack Overflow  http://jsfiddle.net/paulalexandru/Z2Lu5/  - Was looking at this to see if I could reuse it but I ended but just doing my own thing.    Another way which I've seen   Using a sticky








Read more










Installing Windows on Acer chromebook 15 cb3-532





















 Much of my notes are just small problems I faced (what's new!) haha. Either way this was a really fun project to do for a friend and I got excited once I research all the information. You can find instruction videos but what helped me the most was the coolstar website. Sadly they don't have parameters in the url so I can link the machine I used in this article.  -  https://coolstar.org/chromebook/windows-install.html     Scared of messing with the bios? Don't be!      So you need to first remove the screw to put a legacy bios on the machine. Its easy to backup the chrome os one and with the same steps to change it. You can go back in and revert to the chrome version bios. Its that last part that had me worried and its very easy to do.         Problems getting into Developer Mode?    Follow the instructions to the letter, during the step to disable the OS verification, press Ctrl-D to boot into os. If you hear two beeps I would go back to set one. I got in a loop where it s








Read more










Aspetcore: NLog with Postgresql





















 This Article is base ASP.Net Core 2 and the latest version of Nlog.    1. Install NLog and the Postgresql Package   Using NuGet to install the package into your ASP.NET Core project:  PM > Install-Package NLog.Web.AspNetCore PM > Install-Package Npgsql   3. Register NLog   Add in your Startup.cs   public  void  Configure ( IApplicationBuilder app, IHostingEnvironment env, ILoggerFactory loggerFactory )  {  ...     env.ConfigureNLog( "nlog.config" );  ...      // make sure Chinese chars don't fk up      Encoding.RegisterProvider(CodePagesEncodingProvider.Instance);       //add NLog to ASP.NET Core      loggerFactory.AddNLog();      //add NLog.Web      app.AddNLogWeb(); }   4. Add to Your Controller   Add a logger object to your Controller.  private readonly  ILogger<YourController> _logger;   Modify the constructor to use it  public  YourController ( ILogger<YourController> logger = null )  {     if  ( null  != logger)     {         _logger = logger;    








Read more