How to get Post parameters on IsAuthorized of AuthorizeAttribute ASP.NET Web.API MVC 5

Question

I need to get values of my Post Parameters at the time of Authorization. Searchers on web but no solution is working. ActionArguments count always showing 0 and not able to find values in ActionDescriptor.GetParameters()

Here is my code:

POST model -

public class XyzModel
{
   public int Prop1 { get; set; }
   public string Prop2 { get; set; }
}

Custom Authorize Attribute -

public class CustomAuthorizeAttribute  : AuthorizeAttribute
{
   protected override bool IsAuthorized(HttpActionContext actionContext)
   {    
     bool conditions = // here I need to check value of my model (XyzModel) properties 
    if(conditions)
    {
       return true;
    }

      return false;
    }        
}

Code in controller -

[HttpPost]
[CustomAuthorizeAttribute]       
public IHttpActionResult MyAction(XyzModel model)
{
    // my work here
}

Any suggestion?

Ankit K · Accepted Answer · 2017-03-08 06:56:07Z

6

You can access model property of ActionArguments it will return XyzModel object. than you can perform any operation on its properties:

XyzModel model = (XyzModel)actionContext.ActionArguments["model"];

In your code it will be like this:

public class CustomAuthorizeAttribute  : AuthorizeAttribute
{
    protected override bool IsAuthorized(HttpActionContext actionContext)
    {
        var prop1 = HttpContext.Current.Request.Params["Prop1"];
        var prop2 = HttpContext.Current.Request.Params["Prop2"];
        bool conditions = // add conditions based on above properties
        if(conditions)
        {
            return true;
        }

        return false;
    }        
}

edited Mar 8, 2017 at 6:56

answered Mar 8, 2017 at 6:07

Ankit K

1,3261 gold badge11 silver badges24 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

NMathur Over a year ago

thanks for reply . but as I mentioned in my question ActionArguments count are showing 0.

Ankit K Over a year ago

ohh okay i did not noticed that. Thanks.

Ankit K Over a year ago

If ActionArguments count is 0 than posted data's properties can be access as this: HttpContext.Current.Request.Params["Prop1"]; HttpContext.Current.Request.Params["Prop2"]; I have updated my answer.

Akash KC · Accepted Answer · 2017-03-08 06:54:27Z

3

I believe, you will not get post parameter value in AuthorizeAttribute as AuthorizeAttribute methods are called before action's parameter binding.

For your scenario, you can use ActionFilterAttribute which executes only after action's parameter binding. You can create your custom filter attribute by using ActionFilterAttribute

using System.Web.Http.Controllers;
using System.Web.Http.Filters;

public class CheckMyPostDataFilter : ActionFilterAttribute
{
    public override void OnActionExecuting(HttpActionContext actionContext)
    {
        XyzModel model = (XyzModel )actionContext.ActionArguments["model"]; // you will get data here 

        base.OnActionExecuting(actionContext);
    }
}

You can simply decorate above CheckMyPostDataFilter filter in your action :

[HttpPost]
[CheckMyPostData]       
public IHttpActionResult MyAction(XyzModel model)
{
    // my work here
}

edited Mar 8, 2017 at 6:54

answered Mar 8, 2017 at 6:14

Akash KC

16.4k6 gold badges41 silver badges59 bronze badges

6 Comments

mmushtaq Over a year ago

As far as i know OnActionExecuting does not take HttpActionContext as parameter. Actually it takes ActionExecutingContext as parameter.

NMathur Over a year ago

HttpActionContext also worked using System.Web.Http.Filters .. ActionExecutingContext uses System.Web.Mvc.Filters ..

mmushtaq Over a year ago

Sorry! my mistake. System.Web.Http.Filters.ActionFilterAttribute for web-api method OnActionExecuting takes HttpActionContext parameter.

mmushtaq Over a year ago

while System.Web.Mvc.ActionFilterAttribute method OnActionExecuting takes ActionExecutingContext parameter.

NMathur Over a year ago

and changing to ActionExecutingContext using System.Web.Mvc.Filters not working for me . .only HttpActionContext is working

|

Satheesh · Accepted Answer · 2017-06-15 19:40:10Z

1

You can use Request Body Input Stream to read the entire Body content as below

public sealed class CustomAuthorizeAttribute : AuthorizeAttribute
{
    protected override bool IsAuthorized(HttpActionContext actionContext)
    {
        var req = HttpContext.Current.Request.InputStream;
        string body = new StreamReader(req).ReadToEnd();
    }
}

answered Jun 15, 2017 at 19:40

Satheesh

9023 gold badges16 silver badges39 bronze badges

2 Comments

Jamo Over a year ago

This works for me, the rest of them state to use HttpContext.Current.Request.Params, however, there I could not find any of my parameters.

Zeshan Munir Over a year ago

You can only read from InputStream once. If you do it in the attribute then the model binder will not be able to read the body to map to action method.

Collectives™ on Stack Overflow

How to get Post parameters on IsAuthorized of AuthorizeAttribute ASP.NET Web.API MVC 5

3 Answers 3

3 Comments

6 Comments

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

3 Comments

6 Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related