User Authentication

Question

Hi

If user is not authenticated Login Page should Open but it is not opening. I need if User is not Login then Login View should be displayed.How this can be done

Home Controller

    public class HomeController : Controller
    {
        [AllowAnonymous]
        public ActionResult Index()
        {
            return View();
        }
        public ActionResult Login()
        {
            return PartialView("_Login");
        }

        [HttpPost]
        [Authorize]
        public ActionResult Logout()
        {
            FormsAuthentication.SignOut();
            return RedirectToAction("Index");
        }

}

Home Index - Blank Page

Route.Config

public static void RegisterRoutes(RouteCollection routes)
{
routes.IgnoreRoute("{resource}.axd/{*pathInfo}");

            routes.MapRoute(
                name: "Default",
                url: "{controller}/{action}/{id}",
                defaults: new { controller = "Home", action = "Index", id = UrlParameter.Optional }
            );
        }

Web.Config

Thanks

Sachin Singh · Answer

go through my article and follow each step. you can skip the authorization part if you don't want role based authorization. https://www.sharpencode.com/article/MVC/filters-in-asp-net-mvc/authorize

Satya Karki · Answer

Try this as per your controller public class HomeController : Controller { [ MyAuthorize ] public ActionResult Index() { return View(); } [AllowAnonymous] public ActionResult Login() { return PartialView( "_Login" ); } [HttpPost] [ MyAuthorize ] public ActionResult Logout() { FormsAuthentication.SignOut(); return RedirectToAction( "Index" ); } } Authentication Filter public class MyAuthorize : AuthorizeAttribute { protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext) { //you can change to any controller or html page. filterContext.Result = new RedirectResult( "/home/Login" ); } } Now you can use MyAuthorize filter in every other controller.

Satya Karki · Answer

Hi - For View i want to give access to all User [Authorize] atrribute. This means any login user can access this. If you want to make this unauthorize then use [ AllowAnonymous]. This means user can view without login - For POst I want to give acces to conly SUperVisor. [Authorize(Roles="Supervisor")] - For User Creation i want to gives access only to Admin [Authorize(Roles="Admin")] - Do i need to write [AllowAnonymous or Authorize] on each & every method or it can be done Globally. You can do authorization/Authentication globally, however, role based authrization is recommended to do in controller/action level.

Sachin Singh · Answer

You can set the Authorization Globally in Global.asax (Application_Start event) for all controllers as GlobalFilters.Filters.Add( new AuthorizeAttribute() { Roles = "Admin, Editor" });

Sachin Singh · Answer

How many times, I have will have to emphasize that partial view is not a physical view and can't be rendered on its own, it is just a logical view and will always come inside any parent view of type ViewResult i.e View(). so modify your code, from [HttpGet] public ActionResult Login(string ReturnUrl) { ViewBag.ReturnUrl = ReturnUrl; //return View(); return PartialView( "_Login" ); } to this [HttpGet] public ActionResult Login(string ReturnUrl) { ViewBag.ReturnUrl = ReturnUrl; return View(); } now inside the Login View call your partial view @Html.Partial( "_Login" )

Rijwan Ansari · Answer

hi, For general, you can follow @satya answer. However, for role base: You can follow this blog for step by step role based authentication. https://www.c-sharpcorner.com/article/role-based-authentication-in-asp-net-mvc/

Arnab Mukherjee · Answer

https://www.c-sharpcorner.com/article/custom-authentication-with-asp-net-mvc/

Ramco Ramco · Answer

Hi Sachin Login page is not opening in Main Layout content. I have created it as partial. Below is the View @model MyApplication.Models.User @using (Html.BeginForm("Login", "Home", FormMethod.Post)) { @Html.AntiForgeryToken() × Close LogOn @Html.TextBoxFor(m => m.UserName, new { placeholder = "Username / Email" }) @Html.ValidationMessageFor(m => m.UserName) @Html.PasswordFor(m => m.Password, new { placeholder = "Password" }) @Html.ValidationMessageFor(m => m.Password) Remember Me:@Html.CheckBox("RememberMe") @Html.Hidden("ReturnUrl", new { @value = ViewBag.ReturnUrl }) } ******************* Home Controller public ActionResult Index() { return View(); } [HttpGet] public ActionResult Login(string ReturnUrl) { ViewBag.ReturnUrl = ReturnUrl; //return View(); return PartialView("_Login"); } **************** Route.Config public static void RegisterRoutes(RouteCollection routes) { routes.IgnoreRoute("{resource}.axd/{*pathInfo}"); routes.MapRoute( name: "Default", url: "{controller}/{action}/{id}", defaults: new { controller = "Home", action = "Index", id = UrlParameter.Optional } ); } HOME VIEW PAGE IS BLANK. Thanks

Ramco Ramco · Answer

Hi Sachin/Satya Supoose i have User , Role , Employee Controller. 3 Roles say User,Admin,Supervisor. For View i want to give access to all For POst I want to give acces to conly SUperVisor. For User Creation i want to gives access only to Admin Do i need to write [AllowAnonymous or Authorize] on each & every method or it can be done Globally Thanks

Ramco Ramco · Answer

Hi Sachin Is this to be done on each Controller [Authorize(Roles="Admin,Editor")] Is it possible that it can Centralised at one location. Thanks

User Authentication

Insert Link

Embed YouTube Video

Table Options

Insert Image

Answers (10)