err_too_many_redirects in HandleUnauthorizedRequest

Question

我在MVC中工作。我搞错了

err_too_many_redirects

在……里面

HandleUnauthorizedRequest

。

public class AuthCheckService : AuthorizeAttribute
{
    protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext)
    {
        if (filterContext.RequestContext.HttpContext.Request.IsAjaxRequest())
        {
            //Ajax request doesn't return to login page, it just returns 403 error.
            filterContext.HttpContext.Response.Clear();
            filterContext.HttpContext.Response.StatusCode = 501;
            throw new ModelStateException("Your Session has expired- Please login again!");
        }
        else
        {
            base.HandleUnauthorizedRequest(filterContext);
            //filterContext.Result = new RedirectToRouteResult(new RouteValueDictionary(new { action = "Login", controller = "Account" }));
        }

    }
}

请让我知道我哪里出错了？

Answer 1

我在web配置文件中测试时犯了一个愚蠢的错误：

 <sessionState timeout="2" cookieName="OnshoreMaintSSID" regenerateExpiredSessionId="true" />
<authentication mode="Forms">
  <forms loginUrl="Account/Login" timeout="1" name=".Onshore" requireSSL="false" />
</authentication>
<pages>

正如您在上面看到的，会话状态超时大于窗体身份验证超时。这就是问题的根源。

解决方案：

 <sessionState timeout="1" cookieName="OnshoreMaintSSID" regenerateExpiredSessionId="true" />
<authentication mode="Forms">
  <forms loginUrl="Account/Login" timeout="2" name=".Onshore" requireSSL="false" />
</authentication>
<pages>

希望这会对其他人有所帮助。