使用[Authorize]属性定义登录URL

Question

I'm making a private-pages-only application in MVC4.

I successfully (almost successfully) created the login page using a custom Membership provider based on NHibernate and my domain's entities/repositories.

Every controller but AuthController is marked with [Authorize] .

The webapp is supposed to redirect me to the login page when I'm not authorized. I created the whole app from scratch, so I know that nowhere I'll find the AuthController to be declared as landing URL for unauthenticated users.

How to tell MVC that?

Answer 1

Assuming you're using the built-in forms authentication, the URL goes into web.config , in the loginUrl attribute of the forms element.

http://msdn.microsoft.com/en-us/library/1d3t3c61(v=vs.71).aspx

<configuration>
  <system.web>
    <authentication mode="Forms">
      <forms loginUrl="/membership/login" />
    </authentication> 
  </system.web>
</configuration>