从AuthorizeCore重定向到另一个具有自定义错误消息的控制器

Question

所以我试图向用户显示一条消息，当他从他未被授权查看的页面重定向时。例如：用户转到www.mypage.com/users并重定向到www.mypage.com/home。

我使用MVC模式，它是asp.net web应用程序。 我重写AuthorizeAttribute和AuthorizeCore方法尝试这样的：

protected override bool AuthorizeCore(HttpContextBase httpContext) 
     { 


      if (false)//Here is custom logic that is working 
      { 
       string message = "You don't have an access to selected menu item."; 
       var dataDict = HttpContext.Current.Session["__ControllerTempData"] as IDictionary<string, object>; 
       if (dataDict == null) 
       { 
        Dictionary<string, object> dictionary = new Dictionary<string, object>(); 
        dictionary["myErrorMessage"] = message; 
        HttpContext.Current.Session["__ControllerTempData"] = dictionary; 
       } 
       else 
       { 
        dataDict["myErrorMessage"] = message; 
        HttpContext.Current.Session["__ControllerTempData"] = dataDict; 
       } 

       _isAuthorized = false; 

       httpContext.Response.Redirect("Home");     
      } 
      else 
      { 
       _isAuthorized = base.AuthorizeCore(httpContext); 
      } 

      return _isAuthorized; 
     } 

然后我试图从该视图访问它

var unauthorized_access_message = TempData["myErrorMessage"] as List <string> ?? new List<string>() ; 

但它不工作。我也试过this，但不是这样，因为我试图访问一个控制器，然后重定向到另一个。 是否有任何解决方案将变量传递给视图或检查某些状态（如重定向原因）？

Answer 1

我通过使用Cookie来解决它。

在CustomAuthorizeAttribute设置的cookie：AuthorizeAttribute类：

protected override bool AuthorizeCore(HttpContextBase httpContext) 
      { 

       if (false) 
       { 
        HttpCookie mycookie= new HttpCookie("unauthorize_error", "You do not have access to requested link."); 
        httpContext.Response.SetCookie(mycookie); 
        httpContext.Response.Redirect("Home"); 
        return false; 
       } 
       else 
       { 
        return base.AuthorizeCore(httpContext); 
       } 
      } 

然后在控制器：

string cookieValue = string.Empty; 
      if (Request.Cookies["myCookieName"] != null 
       && !string.IsNullOrEmpty(Request.Cookies["myCookieName"].Value)) 
      { 
       cookieValue = Request.Cookies["myCookieName"].Value; 
       var myCookie = new System.Web.HttpCookie("myCookieName"); 
       myCookie.Expires = System.DateTime.Now.AddDays(-1d); 
       Response.Cookies.Add("myCookieName"); 
      } 
var messages = TempData["mytemperror"] as List<string> ?? new List<string>(); 
      messages.Add(message); 
      TempData["myTempError"] = messages; 

鉴于

最后：

var errorMessage = TempData["myTempError"] as List<string> ?? new List<string>(); 

Answer 2

而不是AuthorizeCore，你可以覆盖OnAuthorization其中您可以直接从Controller访问TempData？

public override void OnAuthorization(AuthorizationContext filterContext) 
{ 
    if (false) 
    { 
     filterContext.Controller.TempData["myErrorMessage"] = 
      "You don't have an access to selected menu item."; 
    } 
    base.OnAuthorization(filterContext); 
} 

使用

string unauthorized_access_message = (TempData["myErrorMessage"] ?? "").ToString();