User Authentication

Ramco Ramco

If user is not authenticated Login Page should Open but it is not opening. I need if User is not Login then Login View should be displayed.How this can be done

Home Controller

    public class HomeController : Controller
    {
        [AllowAnonymous]
        public ActionResult Index()
        {
            return View();
        }
        public ActionResult Login()
        {
            return PartialView("_Login");
        }

        [HttpPost]
        [Authorize]
        public ActionResult Logout()
        {
            FormsAuthentication.SignOut();
            return RedirectToAction("Index");
        }

}

Home Index - Blank Page

Route.Config

public static void RegisterRoutes(RouteCollection routes)
{
routes.IgnoreRoute("{resource}.axd/{*pathInfo}");

            routes.MapRoute(
                name: "Default",
                url: "{controller}/{action}/{id}",
                defaults: new { controller = "Home", action = "Index", id = UrlParameter.Optional }
            );
        }

Web.Config

Thanks

10 Replies

Know the answer? Post it — somebody with the same question will find it here.

Sachin Singh5y ago
Accepted answer
go through my article and follow each step. you can skip the authorization part if you don't want role based authorization.
https://www.sharpencode.com/article/MVC/filters-in-asp-net-mvc/authorize
+4
Sachin Singh5y ago
How many times, I have will have to emphasize that partial view is not a physical view and can't be rendered on its own, it is just a logical view and will always come inside any parent view of type ViewResult i.e View().
so modify your code,
from
[HttpGet]
public ActionResult Login(string ReturnUrl)
{
ViewBag.ReturnUrl = ReturnUrl;
//return View();
return PartialView("_Login");
}
to this
[HttpGet]
public ActionResult Login(string ReturnUrl)
{
ViewBag.ReturnUrl = ReturnUrl;

return View();
}
now inside the Login View call your partial view
@Html.Partial("_Login")
+2
Ramco Ramco5y ago
Hi Sachin

Login page is not opening in Main Layout content. I have created it as partial. Below is the View

@model MyApplication.Models.User
@using (Html.BeginForm("Login", "Home", FormMethod.Post))
{
@Html.AntiForgeryToken()

LogOn

@Html.TextBoxFor(m => m.UserName, new { placeholder = "Username / Email" })

@Html.ValidationMessageFor(m => m.UserName)

@Html.PasswordFor(m => m.Password, new { placeholder = "Password" })

@Html.ValidationMessageFor(m => m.Password)

Remember Me:@Html.CheckBox("RememberMe")
@Html.Hidden("ReturnUrl", new { @value = ViewBag.ReturnUrl })

}

******************* Home Controller
public ActionResult Index()
{
return View();
}
[HttpGet]
public ActionResult Login(string ReturnUrl)
{
ViewBag.ReturnUrl = ReturnUrl;
//return View();
return PartialView("_Login");
}

**************** Route.Config
public static void RegisterRoutes(RouteCollection routes)
{
routes.IgnoreRoute("{resource}.axd/{*pathInfo}");
routes.MapRoute(
name: "Default",
url: "{controller}/{action}/{id}",
defaults: new { controller = "Home", action = "Index", id = UrlParameter.Optional }
);
}

HOME VIEW PAGE IS BLANK.

Thanks
+2
Satya Karki5y ago
Hi

- For View i want to give access to all
User [Authorize] atrribute. This means any login user can access this.
If you want to make this unauthorize then use [AllowAnonymous]. This means user can view without login

- For POst I want to give acces to conly SUperVisor.
[Authorize(Roles="Supervisor")]

- For User Creation i want to gives access only to Admin
[Authorize(Roles="Admin")]

- Do i need to write [AllowAnonymous or Authorize] on each & every method or it can be done Globally.
You can do authorization/Authentication globally, however, role based authrization is recommended to do in controller/action level.

+3
Ramco Ramco5y ago
Hi Sachin/Satya

Supoose i have User , Role , Employee Controller. 3 Roles say User,Admin,Supervisor.

For View i want to give access to all
For POst I want to give acces to conly SUperVisor.
For User Creation i want to gives access only to Admin
Do i need to write [AllowAnonymous or Authorize] on each & every method or it can be done Globally

Thanks
+2
Rijwan Ansari5y ago
hi,

For general, you can follow @satya answer. However, for role base:
You can follow this blog for step by step role based authentication.
https://www.c-sharpcorner.com/article/role-based-authentication-in-asp-net-mvc/
+2
Sachin Singh5y ago
You can set the Authorization Globally in Global.asax (Application_Start event) for all controllers as
GlobalFilters.Filters.Add(new AuthorizeAttribute() { Roles = "Admin, Editor" });
+3
Satya Karki5y ago
Try this as per your controller
public class HomeController : Controller
    {
        [MyAuthorize]
        public ActionResult Index()
        {
            return View();
        }
       [AllowAnonymous]
        public ActionResult Login()
        {
            return PartialView("_Login");
        }

        [HttpPost]
        [MyAuthorize]
        public ActionResult Logout()
        {
            FormsAuthentication.SignOut();
            return RedirectToAction("Index");
        }

}
Authentication Filter
public class MyAuthorize : AuthorizeAttribute
{
   protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext)
   {
     //you can change to any controller or html page.
     filterContext.Result = new RedirectResult("/home/Login");

   }
}
Now you can use MyAuthorize filter in every other controller.
+4
Ramco Ramco5y ago
Hi Sachin

Is this to be done on each Controller

[Authorize(Roles="Admin,Editor")]

Is it possible that it can Centralised at one location.

Thanks
+2
Arnab Mukherjee5y ago
https://www.c-sharpcorner.com/article/custom-authentication-with-asp-net-mvc/
+2

User Authentication

LogOn