Filters in .net application?

Hello Abhishek,

Please refer the below link for filters in .Net

https://learn.microsoft.com/en-us/aspnet/core/mvc/controllers/filters?view=aspnetcore-8.0

https://www.c-sharpcorner.com/article/filters-in-Asp-Net-mvc-5-0-part-twelve/

https://www.c-sharpcorner.com/article/filters-in-Asp-Net-mvc-5-0-part-twelve/

https://medium.com/c-sharp-progarmming/exploring-the-power-of-filters-in-asp-net-a-comprehensive-guide-85801a7a7b1b

https://dotnettutorials.net/lesson/filters-in-mvc/

 

Thanks

In .NET, filters are mechanisms that allow you to intercept and handle certain events or actions that occur within your application. They are commonly used in ASP.NET MVC and ASP.NET Core applications for tasks such as logging, authentication, authorization, and exception handling.

Let's take an example of an authentication filter in ASP.NET Core:

using Microsoft.AspNetCore.Mvc;
using Microsoft.AspNetCore.Mvc.Filters;
using Microsoft.Extensions.Logging;

public class CustomAuthenticationFilter : IAuthorizationFilter
{
    private readonly ILogger _logger;

    public CustomAuthenticationFilter(ILogger logger)
    {
        _logger = logger;
    }

    public void OnAuthorization(AuthorizationFilterContext context)
    {
        // Check if user is authenticated
        if (!context.HttpContext.User.Identity.IsAuthenticated)
        {
            // Log unauthorized access attempt
            _logger.LogWarning("Unauthorized access attempt: {0}", context.HttpContext.Request.Path);

            // Redirect to login page or return unauthorized status
            context.Result = new UnauthorizedResult();
        }
    }
}

In this example, CustomAuthenticationFilter is a custom authentication filter that implements the IAuthorizationFilter interface. This interface requires the implementation of the OnAuthorization method, which gets called when authorization is required for a particular action in your application.

Inside the OnAuthorization method, we check if the user is authenticated. If not, we log the unauthorized access attempt using an injected logger and return an UnauthorizedResult, which can redirect the user to a login page or return an unauthorized status code.

You can then apply this filter to your controllers or controller actions using attributes. For example:

[ServiceFilter(typeof(CustomAuthenticationFilter))]
public class MyController : Controller
{
    // Controller actions
}

This will apply the CustomAuthenticationFilter to all actions within the MyController class.

Filters in .NET provide a powerful way to implement cross-cutting concerns in your application, allowing you to encapsulate common behavior and apply it uniformly across your controllers or actions.