How extend AbpMvcAuthorizeFilter and replace it ? #1523

2 Answer(s)

• 

  0

  hikalkan created 7 years ago

  Support Team

  answered here: <a class="postlink" href="https://github.com/aspnetboilerplate/aspnetboilerplate/issues/1256">https://github.com/aspnetboilerplate/as ... ssues/1256</a>

  Save Cancel
• 

  0

  klainer created 7 years ago

  Hi thanks! I tried to create custom Athorizate Attribute which is deriveder from AbpMvcAuthorizeAttribute and I have problem with

  HandleUnauthorizedRequest
  

  . This method is never called in this CustomAttribute. The same problem is in

  AbpAuthorizeAttribute
  

  also not called.

  My implementation:

  public class CustomMvcAuthorizeAttribute : AbpMvcAuthorizeAttribute
      {
          public ILogger Logger { get; set; }
          public string[] Permissions { get; set; }
          public bool RequireAllPermissions { get; set; }
  
          public VSDMvcAuthorizeAttribute(params string[] permissions) :base(permissions)
          {
              Logger = NullLogger.Instance;
          }
  
          protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext)
          {
  
              var httpContext = filterContext.HttpContext;
  
  **var message = string.Format("'{0}' unauthorize access.",  httpContext.Request.CurrentExecutionFilePath );
              Logger.Security(message); // my custom security log**
              if (!httpContext.Request.IsAjaxRequest())
              {
                  base.HandleUnauthorizedRequest(filterContext);
                  return;
              }
  
              httpContext.Response.StatusCode = httpContext.User.Identity.IsAuthenticated == false
                                        ? (int)System.Net.HttpStatusCode.Unauthorized
                                        : (int)System.Net.HttpStatusCode.Forbidden;
  
              httpContext.Response.SuppressFormsAuthenticationRedirect = true;
              httpContext.Response.End();
  
          }
  

  Thanks for help

  Save Cancel