I have my Custom AuthorizeAttribute .
It works perfectly the way I want, but it always directs the user to /Account/Login , I would like it to redirect to another page that I chose, since he does not have authorization, how do I do that?
Remembering is Authorization and not Authentication.
In the authentication page is correct, log in.
Based on this question .
Add the following method in CustomAuthorizationAttibute :
protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext)
{
if (string.IsNullOrEmpty(System.Web.HttpContext.Current.User.Identity.Name))
{
// A sessão está nula ou vazia, não existe usuário logado.
filterContext.Result = new RedirectToRouteResult(
new RouteValueDictionary(
new
{
controller = "Home",
action = "Login"
})
);
}
else
{
// Usuário não tem permissão.
filterContext.Result = new RedirectToRouteResult(
new RouteValueDictionary(
new
{
controller = "Home",
action = "NaoAutorizado"
})
);
}
}
Normally redirect using MVC's redirect method.
And put a location tag in web.config by assigning anonymous authoring only to your action (url)
<location path="login/SessaoExpirada">
<system.web>
<authorization>
<allow users="?" />
</authorization>
</system.web>
</location>
</configuration>