authorize-attribute

Using Windows Azure's Microsoft.Web.DistributedCache.DistributedCacheOutputCacheProvider as the outputCache provider for an MVC3 app. Here is the relevant action method: [ActionName("sample-cached-page")] [OutputCache(Duration = 300, VaryByCustom = "User", Location = OutputCacheLocation.Server)] [Authorize(Users = "me@mydomain.tld,another@otherdomain.tld")] public virtual ActionResult SampleCachedPage() { return View(); } I get the following exception when loading this view from a web browser: System.Configuration.Provider.ProviderException: When using a custom output cache provider like

How to force / set global authorization for all actions in MVC Core ? I know how to register global filters - for example I have: Setup.cs services.AddMvc(options => { options.Filters.Add(new RequireHttpsAttribute()); }); and this works fine, but I can't add the same for Authorize: options.Filters.Add(new AuthorizeAttribute()); I have error: Cannot convert from 'Microsoft.AspNet.Authorization.AuthorizeAttribute()' to 'System.Type' (Method .Add() needs IFilterMetadata type) I know - from similar questions - that this works on MVC4-5... So something must changed on MVC Core... Someone have any

If I have the Authorize attribute on both the controller and the action, which one will take the effect? Or will both take effect? Andy Brown You asked: If I have Authorize attribute on both controller and action, which one will take the effect? Both? To answer this simply: Both. The effect is to AND the two restrictions together. I'll explain why below ... Details So, there are a few reasons you could be asking this. You want to know how to enforce an additional constraint on an Action compared to a method. e.g. At controller level, enforce users in the role "user" At an action level,

I'm making an ajax call using jquery to an asp.net mvc controller action: [AcceptVerbs(HttpVerbs.Post)] public ActionResult GetWeek(string startDay) { var daysOfWeek = CompanyUtility.GetWeek(User.Company.Id, startDay); return Json(daysOfWeek); } When session times out, this call will fail, as the User object is stored in session. I created a custom authorize attribute in order to check if session was lost and redirect to the login page. This works fine for page requests, however it doesn't work for ajax requests, as you can't redirect from an ajax request: [AttributeUsage(AttributeTargets