.Net MVC Partial View load login page when session expires

Question

I am building a web application using .net MVC 4.

I have ajax form to edit data.

enter image description here

If the user is idle for 15 mins it will expire the session of the user. When that happens if user click edit button it loads the login page inside the partial content hence now the current session expires.

enter image description here

Edit Link - cshtml code

@Ajax.ActionLink("Edit", MVC.Admin.Material.ActionNames.TagEditorPanel, MVC.Admin.Material.Name, new { isView = "false", id = Model.ID.ToString() }, new AjaxOptions { HttpMethod = "GET", UpdateTargetId = "materialTagBox", InsertionMode = InsertionMode.Replace }, new { @class = "editlinks" })

Controller/Action Code

[Authorize]
public virtual ActionResult TagEditorPanel(bool isView, int id)
{
   //do something
   return PartialView(MVC.Admin.Material.Views._tag, response);
}

Web.config

<authentication mode="Forms">
  <forms loginUrl="~/Account/Login" timeout="2880" />
</authentication>

I understand why it is happening. I don't know how to resolve it. I want to prevent it and I want to redirect user to login page directly. How can I achieve this?

Thanks inadvance..!!!

score 13 · Accepted Answer · answered May 29 '14 at 17:24

13

Maybe a hacky answer, but you can change the redirect location in forms authentication to a page that sets the window location to the login page with javascript.

Web Config

<authentication mode="Forms">
  <forms loginUrl="~/Account/RedirectToLogin" timeout="2880" />
</authentication>

Account Controller

public ActionResult RedirectToLogin()
{
    return PartialView("_RedirectToLogin");
}

_RedirectToLogin View

<script>
    window.location = '@Url.Action("Login", "Account")';
</script>

answered May 29 '14 at 17:24

kramwens

146
1
5

1

Sure it's a bit of a hack but it's very effective (and quick!). Thanks. – Marc Nov 21 '14 at 13:06
This is great man. It worked perfectly ! As you and Marc said, kind of hack, but is there any better way you came across lately ? – Milind Thakkar Apr 26 '16 at 05:22

score 1 · Answer 2 · answered Mar 21 '14 at 11:49

1

The issue is your call is intercepted by [Authorize] and sends the login page even before your action method code is called. One way to sort this out is to create a custom action filter to check the timeout and do a hard redirect to login page. Following post has a good write up which may help you in creating and registering the filter

http://www.codeblockdrive.com/2012/12/mvc-custom-filters-session-timeout.html

Best of luck

answered Mar 21 '14 at 11:49

Chintana Meegamarachchi

1,798
1
12
10

check the comments section of this article. It says "above solution fails when session timeout & someone request an ajax request." :( – yohan.jayarathna Apr 17 '14 at 03:47
This answer doesn't address the question. – A.R. Aug 11 '14 at 20:25

score 1 · Answer 3 · edited May 23 '17 at 12:00

You may want to check the answer to this (similar) question.

ASP.NET MVC Partial view ajax post?

Basically it says that you should avoid making ajax calls to functions that may redirect because of this and other problems.

You can avoid the problem that you are having by authorizing / checking the expiration manually in your function, and then returning redirect information that can be applied to the whole page.

I have used this approach, and it works well.

score 1 · Answer 4 · answered Oct 18 '16 at 12:24

Inspired by kramwens answer, one could avoid making an extra RedirectToLogin view (and controller action) and just put the following in you original Login view:

<script> 
if (window.location != '@string.Format("{0}://{1}{2}",Request.Url.Scheme, Request.Url.Authority,Url.Content("~/Account/Login"))')
            window.location = '@Url.Action("Login", "Account")';
</script>

This tests the current window.location and if it is not as expected, it sets it as expected. I know, my js is a bit hacky and crappy, but it does the work :)

score 0 · Answer 5 · answered May 24 '18 at 06:02

I Have simple way find for partial view session expired.

Simple One Action created then this view java script windows.load() call then url will be pass to this login page.

//in Controller one Action Created.

<script type="text/javascript">
window.location = '@Url.Action("Login", "LogIn")';
</script>

Public ActionResult SessionExpire() { return View(); } //Redirect to login from partail view after session is null:

return Redirect("~/OrderPlace/Sessionview");

score 0 · Answer 6 · answered Jul 28 '19 at 10:50

My solution is to use some c# code whenever possible. I can get the controller and view name, check to see of they are what they should be, and if not redirect to the proper.

var controllerName = ViewContext.RouteData.GetRequiredString("controller");
var actionName = ViewContext.RouteData.GetRequiredString("action");

I then use the following to go to the proper URL:

if (controllerName != "members" && actionName != "logon")
{
    @{ Response.Redirect("~/Members/Logon");}
}

.Net MVC Partial View load login page when session expires

6 Answers6

Linked