c# - Authentication state in ASP.NET MVC ActionFilters -


i have actionfilter name of log log user ip , other details when user login website work write following code:

public class log : actionfilterattribute {     public iappusermanager usermanager { get; set; }      public override void onresultexecuted(resultexecutedcontext filtercontext)     {         var status = filtercontext.controller.tempdata.any(pair => pair.key == "status" && (int)pair.value == 200);          if (filtercontext.httpcontext.user != null && filtercontext.httpcontext.user.identity.isauthenticated && status)         {             var logip = new addipaddressdto()             {                 browser = filtercontext.httpcontext.request.getbrowser(),                 ip = filtercontext.httpcontext.request.getip(),                 os = filtercontext.httpcontext.request.useragent.getos(),                 urlreferrer = filtercontext.httpcontext.request.urlreferrer?.tostring(),                 userid = guid.parse(filtercontext.httpcontext.user.identity.getuserid()),                 username = filtercontext.httpcontext.user.identity.getusername(),             };             usermanager.log(logip);         }         base.onresultexecuted(filtercontext);     } }

this code work when filtercontext.httpcontext.user.identity.isauthenticated ture.

the log filter declare on login action:

[allowanonymous] [route("sign-in", name = "signinroute")] [httppost, validateantiforgerytoken] [log] public virtual async task<actionresult> login(logindto login, string returnto) {      var signinstatus = await _signinmanager          .passwordsigninasync(user.username, login.password, login.rememberme, true)             .configureawait(false);       switch (signinstatus) // success      {          case signinstatus.success:               tempdata["status"] = 200;               return redirecttolocal(returnto);          case signinstatus.lockedout:                 // todo return time of louckout               break;          case signinstatus.requiresverification:               return redirecttoaction("confirmemail");          case signinstatus.failure:               return view(cleanpasswordinlogin(login));             default:                 throw new argumentoutofrangeexception();      } }

login action works fine , signinstatus success after excuted action isauthenticated false.

to solve issue i've tried following items:

  • used httpcontext.current.getowincontext();

  • defined following code in ioc (structuremap 4.5.2)

    config.for<httpcontextbase>().use(() => new httpcontextwrapper(httpcontext.current));

  • tried onactionexecuted,onactionexecuting,onresultexecuting

  • used iauthenticationmanager in identity 2.0

how can solve issue?

after execution of signinmanager.passwordsigninasync, authentication cookie created includes user info. user.identity info filled claims authentication cookie, not parsed yet (this cookie parsed in second request server, not in same login request). that's why can't use user.identity after passwordsigninasync. @ specific point, have 1 option find userid:

 string userid = usermanager.findbyname(model.email)?.id;

Comments

Post a Comment

Popular posts from this blog

python - Operations inside variables -

this question has answer here: evaluating mathematical expression in string 12 answers i want make python script finds maximum possible output using 2 operations. problem says there syntax error @ 2nd last line, in b in there. how can fix it? x = 0 = int(input("1st number:")) c = int(input("2nd number:" )) e = int(input("3rd number:" )) in range(4): if == 0: b = "+" elif == 1: b = "-" elif == 2: b = "/" else: b = "*" j in range(4): if j == 0: d = "+" elif j == 1: d = "-" elif j == 2: d = "/" else: d = "*" k = b c d e print(k) if you're after variables e on single line, couldn...
Read more

Generic Map Parameter java -

i having lot of methods of type: public static list<eduusers> getdetails(class c, map<string, integer> params) { list<eduusers> details = null; session session = hibernateutil.getsessionfactory().opensession(); transaction tx = null; try { tx = session.begintransaction(); criteria cr = session.createcriteria(c); (map.entry<string, integer> entry : params.entryset()) { cr.add(restrictions.eq(entry.getkey(), entry.getvalue())); } details = cr.list(); tx.commit(); } catch (exception asd) { log.debug(asd.getmessage()); if (tx != null) { tx.commit(); } } { session.close(); } return details; } i trying have generic method them , have written far: public static <t> list<t> getdetails(class<t> c, class<t> b) { l...
Read more

arrays - What causes a java.lang.ArrayIndexOutOfBoundsException and how do I prevent it? -

what arrayindexoutofboundsexception mean , how rid of it? here code sample triggers exception: string[] name = {"tom", "dick", "harry"}; for(int = 0; i<=name.length; i++) { system.out.print(name[i] +'\n'); } your first port of call should documentation explains reasonably clearly: thrown indicate array has been accessed illegal index. index either negative or greater or equal size of array. so example: int[] array = new int[5]; int boom = array[10]; // throws exception as how avoid it... um, don't that. careful array indexes. one problem people run thinking arrays 1-indexed, e.g. int[] array = new int[5]; // ... populate array here ... (int index = 1; index <= array.length; index++) { system.out.println(array[index]); } that miss out first element (index 0) , throw exception when index 5. valid indexes here 0-4 inclusive. correct, idiomatic for statement here be: for (int index = 0; index <...
Read more