Databases
StackOverflow2013
Postsdbo
PO
 

Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>I actually have a blog post queued up about this that I'll add to the comment when it has been posted, but in the time being here's what's happening.</p> <p>At a high level, when the ASP.NET runtime sees a <code>401</code> response code it will automatically convert it to a redirect and send the user to the login page. What you want to do is bypass that <code>401</code>.</p> <p>In MVC, when you're using the <code>AuthorizeAttribute</code>, it checks to see if the user is authorized and, if not, returns an <code>HttpUnauthorizedResult</code>. This basically forces the runtime to redirect the user to the login page. What <em>you</em> want to do is override this behavior.</p> <p>To do this, extend the AuthorizeAttribute as such:</p> <pre><code>public class AuthorizeWithAjaxAttribute : AuthorizeAttribute { public override void OnAuthorization(AuthorizationContext filterContext) { base.OnAuthorization(filterContext); if (filterContext.Result is HttpUnauthorizedResult &amp;&amp; filterContext.HttpContext.Request.IsAjaxRequest()) { filterContext.HttpContext.Response.StatusCode = 200; filterContext.Result = /* Some result recognized by the client */ } } } </code></pre> <p>When you make an AJAX request and the data of the response is equal to what you return as the filter context's result, simply redirect the user to the login page via javascript.</p>
    singulars
    1. This table or related slice is empty.
    1. POProblem with Ajax Call to Action Method on Controller Requiring Authenticated User
      singulars
      1. PTQuestion
    1. PTAnswer
    1. This table or related slice is empty.
    1. USandymeadows
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. POProblem with Ajax Call to Action Method on Controller Requiring Authenticated User
      singulars
      1. PTQuestion
    1. This table or related slice is empty.
    1. VO
      singulars
      1. PO
      1. This table or related slice is empty.
      1. VTUpMod
    2. VO
      singulars
      1. PO
      1. This table or related slice is empty.
      1. VTAcceptedByOriginator
    3. VO
      singulars
      1. PO
      1. This table or related slice is empty.
      1. VTUpMod
    1. COThanks for this solution. This expands on what Crimson provided above, and I like the custom attribute solution. Just for my understanding, what is it about the code above where IsAjaxRequest == true that short-circuits MVC from executing the action method? Is it the setting of the StatusCode to 200 or setting the Result? Both? Once the statuscode is 200, I don't see what is keeping MVC from routing the request to the appropriate action method.
      singulars
      1. PO
      1. USRich Miller
    2. COI can't make this code execute once a user's login has timed out. I compiled this code into my project and attached the AuthorizeWithAjax attribute to my controller. I put a breakpoint on the base.On... line, and the breakpoint is only hit when a request is made on the controller and the user's login has not timed out. Once timed out, the breakpoint is never hit. It's as if forms authentication reroutes the user to the login page before the controller code is ever called. It makes me wonder if the standard Authorize attribute is ever hit in this scenario.
      singulars
      1. PO
      1. USRich Miller
    3. COTo answer the first comment is yes, it is the 200 that prevents the redirect from firing. As for the second one, make sure you don't have a standard Authorize there as well. This one serves as both. If you only have the AuthorizeWithAjaxAttribute there and you're still getting the behavior of the breakpoint not firing, my second guess is attribute order.
      singulars
      1. PO
      1. USandymeadows
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload