Custom AuthorizeAttribute with custom authentication
I am using ASP.NET MVC 4 Web application as a front-end for some WCF services. All the user log in/log out and session control is done on the back-end. MVC app should only store a single cookie with session ID. My client does not allow to use Forms Authentication, everything must be customized. I have set up the following in my web.config: <system.web> ... <authentication mode="None" /> </system.web> <system.webServer> <modules> ... <remove name="FormsAuthentication" /> ... </modules> </system.webServer> I have also a global filter: public class FilterConfig { public static void