Different LoginUrl for different URL's with ASP.NET MVC and Forms Authentication

Question

I have a ASP.NET MVC project, and I would like to have a different LoginUrl for different areas of the website. Depending on the area of the site, different types of credentials are entered.

http://host.com/widget/home should redirect the user to http://host.com/widget/logon.

http://host.com/admin/home should redirect the user to http://host.com/admin/logon.

So far, the best solution I have come up with, is to have Forms Auth loginUrl="~/Account/Logon" in the web.config:

   <authentication mode="Forms">
      <forms loginUrl="~/Account/LogOn" timeout="2880"/>
   </authentication>

In the controller for Account:

public ActionResult LogOn()
{
   //redirect depending on the returnUrl?
   string returnUrl = ControllerContext.Controller.ValueProvider["ReturnUrl"].AttemptedValue;
   if (returnUrl.StartsWith("/widget"))
   {
       return Redirect(string.Format("/widget/Logon?ReturnUrl={0}", returnUrl));
   }
   if (returnUrl.StartsWith("/admin"))
   {
       return Redirect(string.Format("/admin/Logon?ReturnUrl={0}", returnUrl));
   }
   return View();
}

Is there a better way to do this?

BTW: you can just put returnUrl as a string parameter to the method : LogOn(string returnUrl) — Simon_Weaver
– Simon_Weaver, Commented Jan 11, 2011 at 1:16

Community · Accepted Answer · 2017-05-23 12:11:22Z

4

I asked and answered this in my stackoverflow question How to redirect to a dynamic login URL in ASP.NET MVC.

edited May 23, 2017 at 12:11

CommunityBot

11 silver badge

answered Aug 25, 2009 at 17:28

Mike Scott

12.5k8 gold badges44 silver badges54 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Deeksy · Accepted Answer · 2009-08-25 12:20:29Z

1

I know that you can have separate web.config files in sub-folders of a website, so that if you had actual .aspx pages within an admin/ folder, and a web.config in that folder, you could specify the authentication url in that folder separately.

I'm not sure if that works with ASP.NET MVC routes as you're probably not going to have physical files in those sub-folders, but it's worth a try.

answered Aug 25, 2009 at 12:20

Deeksy

5,4742 gold badges26 silver badges27 bronze badges

1 Comment

Jafin Over a year ago

In MVC Areas you do have separate web.config's but you'll probably end up with the error if you attempt to add the authentication attribute: It is an error to use a section registered as allowDefinition='MachineToApplication' beyond application level. This error can be caused by a virtual directory not being configured as an application in IIS.

user162715 · Accepted Answer · 2009-08-25 13:10:33Z

1

Add Authenticate attribute to your actions.

Then in global.asax add Application_AuthenticateRequest then look at the sender and redirect there where you want the action to login.

answered Aug 25, 2009 at 13:10

user162715

111 bronze badge

1 Comment

mlsteeves Over a year ago

I'm just curious, but this seems to be similar to what I had originally done, just in a different place. What are the advantages of doing it this way?

Collectives™ on Stack Overflow

Different LoginUrl for different URL's with ASP.NET MVC and Forms Authentication

3 Answers 3

Comments

1 Comment

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

1 Comment

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related