I'm using MVC and have a situation where in my OnActionExecuting()
I need to determine if the Action method that is about to execute is decorated with an attribute, the AuthorizeAttribute
in particular. I'm not asking if authorization succeeded/failed, instead I'm asking does the method require authorization.
For non-mvc people filterContext.ActionDescriptor.ActionName
is the method name I'm looking for. It is not, however, the currently executing method; rather, it is a method that will be executed shortly.
Currently I have a code block like below, but I'm not terribly pleased with the looping prior to every action. Is there a better way to do this?
System.Reflection.MethodInfo[] actionMethodInfo = this.GetType().GetMethods();
foreach(System.Reflection.MethodInfo mInfo in actionMethodInfo) {
if (mInfo.Name == filterContext.ActionDescriptor.ActionName) {
object[] authAttributes = mInfo.GetCustomAttributes(typeof(System.Web.Mvc.AuthorizeAttribute), false);
if (authAttributes.Length > 0) {
<LOGIC WHEN THE METHOD REQUIRES AUTHORIZAITON>
break;
}
}
}
This is a little like the slightly mistitled "How to determine if a class is decorated with a specific attribute" but not quite.
You can simply use filterContext.ActionDescriptor.GetCustomAttributes
public override void OnActionExecuting(ActionExecutingContext filterContext)
{
bool hasAuthorizeAttribute = filterContext.ActionDescriptor
.GetCustomAttributes(typeof(AuthorizeAttribute), false)
.Any();
if (hasAuthorizeAttribute)
{
// do stuff
}
base.OnActionExecuting(filterContext);
}
var hasAuthorizeAttribute = filterContext.ActionDescriptor.IsDefined(typeof(AuthorizeAttribute), false);
http://msdn.microsoft.com/en-us/library/system.web.mvc.actiondescriptor.isdefined%28v=vs.98%29.aspx
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With