asp.net mvc 5 - What is the difference between using AuthorizeAttribute or IAuthorizationFilter? -

-

authorizeattribute requires override onauthorization method , iauthorizationfilter requires implement onauthorization method. seems same thing me, there other differences? why 1 used on other?

edit: clarify, i'm trying understand difference between following 2 pieces of code.

public class passwordexpirationcheckattribute : authorizeattribute {     private int _maxpasswordageindays;      public passwordexpirationcheckattribute(int maxpasswordageindays)     {         _maxpasswordageindays = maxpasswordageindays;     }      public override void onauthorization(authorizationcontext filtercontext)     {         if (!filtercontext.actiondescriptor.getcustomattributes(typeof(bypasspasswordexpirationcheckattribute), true).any())         {             iprincipal userprincipal = filtercontext.requestcontext.httpcontext.user;             if (userprincipal != null && userprincipal.identity.isauthenticated)             {                 var userstore = new applicationuserstore(new identitydb());                 var usermanager = new applicationusermanager(userstore);                 var user = usermanager.findbynameasync(filtercontext.requestcontext.httpcontext.user.identity.name).result;                  if (user != null)                 {                     var timespan = datetime.today.date - user.lastpasswordchangeddate.date;                     if (timespan.totaldays >= _maxpasswordageindays)                     {                         httpcontextbase httpcontextbase = new httpcontextwrapper(httpcontext.current);                         requestcontext requestcontext = new requestcontext(httpcontextbase, new routedata());                         urlhelper urlhelper = new urlhelper(requestcontext);                          filtercontext.httpcontext.response.redirect(urlhelper.action("changepassword", "manage"));                     }                 }             }         }                      base.onauthorization(filtercontext);     } }

and...

public class passwordexpirationcheckattribute : iauthorizationfilter {     private int _maxpasswordageindays;      public passwordexpirationcheckattribute(int maxpasswordageindays)     {         _maxpasswordageindays = maxpasswordageindays;     }      public void onauthorization(authorizationcontext filtercontext)     {         if (!filtercontext.actiondescriptor.getcustomattributes(typeof(bypasspasswordexpirationcheckattribute), true).any())         {             iprincipal userprincipal = filtercontext.requestcontext.httpcontext.user;             if (userprincipal != null && userprincipal.identity.isauthenticated)             {                 var userstore = new applicationuserstore(new identitydb());                 var usermanager = new applicationusermanager(userstore);                 var user = usermanager.findbynameasync(filtercontext.requestcontext.httpcontext.user.identity.name).result;                  if (user != null)                 {                     var timespan = datetime.today.date - user.lastpasswordchangeddate.date;                     if (timespan.totaldays >= _maxpasswordageindays)                     {                         httpcontextbase httpcontextbase = new httpcontextwrapper(httpcontext.current);                         requestcontext requestcontext = new requestcontext(httpcontextbase, new routedata());                         urlhelper urlhelper = new urlhelper(requestcontext);                          filtercontext.httpcontext.response.redirect(urlhelper.action("changepassword", "manage"));                     }                 }             }         }                      return;     } }

iauthorizationfilter interface. nothing. if wanted use it, you'd have implement own authorization attribute implements interface ground up.

authorizeattribute, on other hand, works out of box. implements iauthorizationfilter , takes care of common needs of developers. still allows override onauthorization method in case want extend functionality, don't have to, works fine without doing that.


Comments

Post a Comment

Popular posts from this blog

java - Oracle EBS .ClassNotFoundException: oracle.apps.fnd.formsClient.FormsLauncher.class ERROR -

-
i need in configuring java on machine because, when try loading forms, loader goes in circles , gives error: java.lang.classnotfoundexception: oracle.apps.fnd.formsclient.formslauncher.class @ sun.plugin2.applet.applet2classloader.findclass(unknown source) @ sun.plugin2.applet.plugin2classloader.loadclass0(unknown source) @ sun.plugin2.applet.plugin2classloader.loadclass(unknown source) @ sun.plugin2.applet.plugin2classloader.loadclass(unknown source) @ java.lang.classloader.loadclass(unknown source) @ sun.plugin2.applet.plugin2classloader.loadcode(unknown source) @ sun.plugin2.applet.plugin2manager.createapplet(unknown source) @ sun.plugin2.applet.plugin2manager$appletexecutionrunnable.run (unknown source) @ java.lang.thread.run(unknown source) i have tried re-installing firefox, older versions of java runtime environments, disabling proxy. what missing? application working on other machines. i spent around 100 hours finding s...
Read more

c# - how to use buttonedit in devexpress gridcontrol -

-
Image
i trying create gridcontrol buttonedit in 1 of columns. when user clicks button edit, popups form select product. when selection done on popup, returns datarow selection main grid below. but when column loses focus, value wrote column disappear. here code creates gridcontrol's data , buttonedit's click event. private void frmsiparisnew_load(object sender, eventargs e) { dt = new datatable(); dt.columns.add("malzeme_kodu",typeof(string)); dt.columns.add("malzeme_aciklama", typeof(string)); dt.columns.add("adet", typeof(decimal)); dt.columns.add("birim", typeof(string)); dt.columns.add("fiyat", typeof(decimal)); dt.columns.add("kur", typeof(string)); dt.columns.add("tutar", typeof(decimal)); datarow dr = dt.newrow(); dt.rows.add(dr); gc.datasource = dt; } private void repositoryitembuttoneditmal...
Read more

How do you convert a timestamp into a datetime in python with the correct timezone? -

-
you naively expect work: import pytz datetime import datetime def tz_datetime_from_timestamp(timestamp): """convert timestamp datetime """ tz = pytz.timezone('australia/perth') server_time = datetime.utcnow() delta = tz.utcoffset(server_time) value = datetime.utcfromtimestamp(timestamp).replace(tzinfo=tz) return value + delta print tz_datetime_from_timestamp(1416387060) and convert timestamp 1416387060 wed nov 19 16:51:00 2014 gmt+8:00. ...but not. prints: 2014-11-19 16:51:00+07:43 the timezone of australia/perth not gmt+7:43. it gmt+8:00. unequivocally stated on australian government website http://www.australia.gov.au/about-australia/our-country/time : awst equal coordinated universal time plus 8 hours (utc +8). so, heck pytz pulling 7.43 from? well, turns out pytz pulls data http://www.iana.org/time-zones time zone database, , database states: # western australia # # rule name type in on @...
Read more