仅当未在asp.net MVC中进行身份验证时，才将用户重定向到登录页面

Question

NET MVC project i have following tag in in web.config file

<authentication mode="Forms"> <forms loginUrl="~/Account/LogOn" timeout="2880"/> </authentication>

This causes even the authenticated users but unauthorized resource requested users to redirect to logon page. but i need only to redirect this page if user try to access unauthorized page and not already authenticated(logged on) and redirect to custom page.

Is there easy way to do this without writing custom action filter?

Answer 1

All that this line does in web.config is to simply define the timeout of the authentication cookie and the login url. It is your code that decides which parts of the site are authenticated or no, by for example decorating your controllers and/or actions with the [Authorize] attribute.

Answer 2

please check your "authorization" setting in web.config file. It should be somewhat

<authorization>
      <deny users="?" />
      <allow users="*" />
    </authorization>

also when user authenticates successfully make sure you call

FormsAuthentication.SetAuthCookie(<username>, false);