Authentication in ASP.NET MVC 5 application using ASP.NET id

Sarthak Patel

6y1.3k.NET

How can I authenticate a user when I am using owin middleware in my ASP.NET MVC5 .NET 4.6 application? I don't need to check for the role or authorization part for my method. I just like to verify that current user is authenticated or not ?I am very confused as I have seen the examples in Microsoft docs and other website but there is no any specific example for authentication when using the owin and identity. they are just using the authorize attribute and passing role to verify user. or is there any custom way to achieve authentication when using the owing and identity in ASP.NET MVC

i haven't implemented owin middle ware by my side, it's default solution that Microsoft gives. i have just created MVC project by selecting individual user authentication option.I found that when place on any method authorize attribute it authenticate user and redirect to login page. Even i am confused that when i pass any role in Authorize attribute it will check for that role so. How Authentication and authorization is managed by the one Authorize attribute?How actually it works?

3 Replies

Know the answer? Post it — somebody with the same question will find it here.

Vertika Chauhan6y ago
Hey , [authorise] over controller or action method responsible for both authentication and authorisation. As this attribute check for valid user login else it will redirect to login page. For further details i will suggest you to go through asp.net identity articles over internet.you will get fair idea why they work .
0
Sarthak Patel6y ago
Hi Vertika ,

Thanks for the reply.

Yes that i know that if i set [AllowAnonymous] over the method than it will allow all user to access the method. But what i like to know is that how authentication part is handled when i set the Authorize attribute over the method? As Authrozation is about to identify that particular user has rights for the particular method or not? But what i am seeing here is it is also taking care for the Authentication part also when i set the Authorize attribute on method. So how they are managing ? AS well as there is no attribute for the authentication. So i like to know in general practices when using the owin and identity how developer are handling the authentication?

Thanks in advance. Waiting for your inputs for the same ASAP.
0
Vertika Chauhan6y ago
After successfully login redirect to the controller and mention that controller with attribute [AllowAnonymous]. It will allow the controller action method to execute without authentication. Eg [AllowAnonymous] Public ActionResult Home() { Return view(); }
0