How to pass data from custom authorize attribute to web api action method?

Question

I am creating a MVC Web API application with forms authentication for the Web API Controllers as well as the regular MVC controllers. In the form authentication cookie I am storing user information which I need to read and pass it to the Web API action methods. I am trying to do this by creating a custom Authorization attribute and adding this value to ActionArguments. However I don't know how to access this data in the Web API action. Below is the code block

public class MyAuthorization : AuthorizeAttribute
    {
        public override void OnAuthorization(HttpActionContext actionContext)
        {
            var isAuthorised = base.IsAuthorized(actionContext);

            if (isAuthorised)
            {
                var cookie = HttpContext.Current.Request.Cookies[FormsAuthentication.FormsCookieName];
                var ticket = FormsAuthentication.Decrypt(cookie.Value);
                var identity = new GenericIdentity(ticket.Name);
                actionContext.ActionArguments["UserInfo"] = ticket.UserData;

            }
        }
    }

And here is the controller code

[RoutePrefix("api/test")]
    [MyAuthorization]
    public class TestWebAPIController : ApiController
    {
        [HttpGet]
        [Route("")]       
        public IHttpActionResult Get() {
            //How to get it here
            return Ok();
        }
    }

devanalyst · Accepted Answer · 2016-03-14 15:35:36Z

2

It was really stupid of me. As the name suggests it is the ActionArgument (actionContext.ActionArguments). So this can be easily accessed in the Web API control by means of an ActionContext.ActionArguments or directly by passing an action argument.

Here is code sample by ActionContext.ActionArguments

public IHttpActionResult Post() {
            var userInfo = ActionContext.ActionArguments["UserInfo"];
            return Ok();
        }

And here is by means of action argument

  public IHttpActionResult Post(UserInfo userinfo) {
       //Code here
        return Ok();
     }

answered Mar 14, 2016 at 15:35

devanalyst

1,4784 gold badges29 silver badges56 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Transformer Over a year ago

hi, it possible to add the company/tenant name as well for a multitenant app. I am wondering if this is the same information the http context provides when checking authorization

Collectives™ on Stack Overflow

How to pass data from custom authorize attribute to web api action method?

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related