ASP.NET

18-Oct-17 9:23

I am trying to build a dictionary of RedirectToRouteResults.

Background:
I am building a web application. Once a user gets past the login, the server returns an encrypted session cookie that follows the user around and is used to display user specific information on each page. Pretty standard fair. Now, the problem is that each Controller Action performs a check on the cookie to check for tampering, if the user's session has expired, if the user is authorized for this page, etc... so each controller has to handle a half-dozen different return types from the security check function. I could handle this with a switch...case in the catch block of each controller's code but that seems sloppy.

The Question:
I am having trouble figuring out how I can build a Dictionary of redirect routes to simplify this. I haven't been able to find anything on the internet in the way of an example for properly building a RedirectToRouteResult object that can be returned in a controller.

Instead of this:

public ActionResult Index()
{
 SecurityCheck secCheck = ValidateConnection(this);

 if (secCheck != secCheck.Okay)
 {
  switch (secCheck)
  {
   case SecurityCheck.AuthenticationFailure:
    return RedirectToAction("Default", "ErrorHandler", new { message = "Not Authorized." });
    // and so on....
  }
 }
}

I would like to simplify it to:

public ActionResult Index()
{
 SecurityCheck secCheck = ValidateConnection(this);

 if (secCheck != secCheck.Okay)
 {
  return SecurityRedirect.Routes[secCheck]; 
  // SecurityRedirect would be a static class that would contain
  // a dictonary of the how each security issue should be redirected.
 }
 else
 {
  return View();
 }
}

Is there a way? I am having no luck figuring out how to build a RedirectToRouteResult as the documentation on it is Spartan at best. I do believe that they would accomplish my goal.

if (Object.DividedByZero == true) { Universe.Implode(); }
Meus ratio ex fortis machina. Simplicitatis de formae ac munus. -Foothill, 2016

Richard Deeming18-Oct-17 9:51

18-Oct-17 9:51

Foothill wrote:
each Controller Action performs a check on the cookie

Sounds like you want an action filter[^] instead. Smile | :)

"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

Foothill19-Oct-17 3:23

19-Oct-17 3:23

Is it possible to pass an object created by an authorization filter to the controller action? My authentication processing creates several objects that get used by most controller actions.

if (Object.DividedByZero == true) { Universe.Implode(); }
Meus ratio ex fortis machina. Simplicitatis de formae ac munus. -Foothill, 2016

Richard Deeming19-Oct-17 9:25

19-Oct-17 9:25

Something like this[^] should work. If you add the data to the filterContext.RouteData.Values collection with a specific key, you should be able to receive it as a parameter to your action, where the parameter name matches the key.

"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

Foothill19-Oct-17 10:58

19-Oct-17 10:58

I ended up wrapping the Controller class in a wrapper class with Properties for the data that I needed to pass along. Problem solved.

if (Object.DividedByZero == true) { Universe.Implode(); }
Meus ratio ex fortis machina. Simplicitatis de formae ac munus. -Foothill, 2016

Foothill19-Oct-17 4:44

19-Oct-17 4:44

Okay, so I have made some progress but I am running into a bit of trouble. On a lot of failures, I redirect the user to the login page but the page URL is not being populated so it tries to call my login action on whatever page its on resulting in an error.

// Login redirect handler
private ViewResult GetRedirectToLogin()
{
 ViewResult result = new ViewResult();

 result.ViewName = "~/Views/Login/Index.cshtml";
 result.MasterName = "~/Views/Shared/_loginlayout.cshtml";
 result.TempData = _context.Controller.TempData;

 return result;
}

This has been working. Any errors with authentication are caught and the user is redirected. The problem is that the browser still thinks its on the first page so that when I click my "Login" button the server looks for a [HttpPost]Login action and returns a 404 error.

if (Object.DividedByZero == true) { Universe.Implode(); }
Meus ratio ex fortis machina. Simplicitatis de formae ac munus. -Foothill, 2016

Richard Deeming19-Oct-17 9:18

19-Oct-17 9:18

How about:

private ActionResult GetRedirectToLogin()
{
    return new RedirectToRouteResult(new RouteValueDictionary 
    {
        { "Controller", "Login" },
        { "Action", "Index" } 
    });
}

"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

Foothill19-Oct-17 10:59

Password Reset works in debug environment but does not work after deployment

19-Oct-17 10:59

I found that one. Works like a charm. Thanks for your help on this one. I had never even looked at Action Filters before this.

if (Object.DividedByZero == true) { Universe.Implode(); }
Meus ratio ex fortis machina. Simplicitatis de formae ac munus. -Foothill, 2016

Philip Hall16-Oct-17 6:50

Philip Hall

16-Oct-17 6:50

I have an ASP.Net application built in Visual Studio 2015 and deployed to the Azure environment. I am trying to add the capability to allow the user to reset their password. The application sends an email to the user with a link that contains a code to validate the user. After clicking on the link, the user is sent to a page that allows them to enter a new password then click a Submit button to actually change the password. This works fine in the Visual Studio environment but fails with no indication of why after being deployed to Azure. Does anyone have an idea of what might cause this?

The original page is displayed correctly and the code is validated. The process fails when the user clicks the submit button and the standard login page is displayed.

Thanks.

Phil

Re: Password Reset works in debug environment but does not work after deployment

A_Griffin18-Oct-17 21:49

A_Griffin

18-Oct-17 21:49

How can anyone guess with only that information

Quote:
fails with no indication of why

You must be able to do some kind of debugging to track down the point of failure: is the token not being read? Is it being found in the database? Is a matching user record found? Is the database read or write the issue? There are numerous places in the process you can monitor to see what's going on. If nothing else, log every step along the way...

Re: Password Reset works in debug environment but does not work after deployment

Philip Hall19-Oct-17 5:10

Philip Hall

19-Oct-17 5:10

The token works fine and the user record is found. Those items are checked before the page is displayed that allows the user to enter a new password. It fails when it tries to submit the information. I do not have remote debugging capability so the best I can do is try to display error messages but none of them are displayed.

Code is included below:

@using Microsoft.AspNet.Identity;

@model CLCC_Browser.Models.ManageResetViewModel
@{
ViewBag.Title = "Password Reset";
Layout = "~/Views/Shared/_Layout.cshtml";
}

@ViewBag.Title.

@using (Html.BeginForm("ManageReset", "Account", FormMethod.Post, new { @class = "form-horizontal", role = "form" }))
{
@Html.AntiForgeryToken()
@Html.ValidationSummary()

@Html.HiddenFor(m => m.Token, new { @class = "form-control" })

@Html.HiddenFor(m => m.UserID, new { @class = "form-control" })

@Html.LabelFor(m => m.UserName, new { @class = "col-md-2 control-label" })

@Html.TextBoxFor(m => m.UserName, new { @class = "form-control" })

@Html.LabelFor(m => m.NewPassword, new { @class = "col-md-2 control-label" })

@Html.PasswordFor(m => m.NewPassword, new { @class = "form-control" })

@Html.LabelFor(m => m.ConfirmPassword, new { @class = "col-md-2 control-label" })

@Html.PasswordFor(m => m.ConfirmPassword, new { @class = "form-control" })

}

[AllowAnonymous]
public async Task<actionresult> ManageReset(string userName, string userId, string code)
{
IdentityResult result;
ManageResetViewModel model = new ManageResetViewModel();

var provider = new DpapiDataProtectionProvider("PokerResults");
UserManager.UserTokenProvider = new DataProtectorTokenProvider<applicationuser>(provider.Create("ResetPassword"));
UserManager.FindById(userId);
try
{
result = await UserManager.ConfirmEmailAsync(userId, testcode);
}
catch (InvalidOperationException ioe)
{
// ConfirmEmailAsync throws when the userId is not found.
ViewBag.errorMessage = ioe.Message;
return View("Error");
}

if (userId == null || code == null)
{
return View("Error");

}
ViewBag.HasLocalPassword = false;
ViewBag.UserID = userId;
model.UserName = userName;
model.UserID = userId;
model.Token = code;

return View(model);
}

[HttpPost]
[ValidateAntiForgeryToken]
public async Task<actionresult> ManageReset(ManageResetViewModel model)

{
IdentityResult result;

var provider = new DpapiDataProtectionProvider("PokerResults");
UserManager.UserTokenProvider = new DataProtectorTokenProvider<applicationuser>(provider.Create("ResetPassword"));
string thetoken = await UserManager.UserTokenProvider.GenerateAsync("ResetPassword", UserManager,
UserManager.FindByName(model.UserName));
model.Token = thetoken;

ModelState state = ModelState["NewPassword"];
if (state != null)
{
state.Errors.Clear();
}
if (ModelState.IsValid)
{
// result = await UserManager.AddPasswordAsync(User.Identity.GetUserId(), model.NewPassword);

result = await UserManager.ResetPasswordAsync(model.UserID, thetoken, model.NewPassword);
if (result.Succeeded)
{
ModelState.AddModelError("", "Password Reset Succeeded.");
Response.Write("alert('Password Updated');");
ViewBag.Message = "Password Reset Successful";
ViewBag.ResetType = "Complete";
Session["ResetStatus"] = "Complete";
return RedirectToAction("ResetPassword", "Account", "Complete");
// return RedirectToAction("Manage", new { Message = ManageMessageId.SetPasswordSuccess });
}
else
{
ModelState.AddModelError("", "Password Update failed, User = " + model.UserID);
Response.Write("alert('Password Update failed');");
AddErrors(result);
}
}
else
{
ModelState.AddModelError("", "Password Update failed");
Response.Write("alert('Password Update failed - Invalid Model');");
}

return View(model);
}

code for solving zero distortion tecniqueof image steganography

Member 1346535714-Oct-17 9:43

Member 13465357

14-Oct-17 9:43

Please how can I get code for encrypting and decrypting using zero distortion technique of image steganography

Re: code for solving zero distortion tecniqueof image steganography

Kornfeld Eliyahu Peter14-Oct-17 22:53

Kornfeld Eliyahu Peter

14-Oct-17 22:53

As CP is not a code-service site, your best option probably to use Google, and the second best to hire someone...

Skipper: We'll fix it.
Alex: Fix it? How you gonna fix this?
Skipper: Grit, spit and a whole lotta duct tape.

Code is inserting only one row of records. Any ideas?

samflex9-Oct-17 5:16

samflex

9-Oct-17 5:16

Hi again,

This is part of our ongoing dynamic row creation in Repeater.

By default, the first row is available.

After filling in data into the cells of the first row, user clicks the Add New Row button to add another row.

This part works fine.

The issue is that whether user enters one row or several rows, when you submit the data to the database, only one row of data is saved.

Here is the code that I am using.

Any ideas how to modify this so that no matter how many rows are created in the markup, those rows are saved to the database.

Thanks in advance.

foreach (DataRow row in table.Rows)
{
    string txBoatRegNum = row.ItemArray[1] as string;
    string txTaxPayerRet = row.ItemArray[2] as string;

    if (txBoatRegNum != null & txTaxPayerRet != null)
    {
        if (string.IsNullOrEmpty(txTaxPayerRet))
        {
            txTaxPayerRet = "0";
        }
        SqlCommand aircmd = new SqlCommand("sp_savetInfo", conn);
        aircmd.CommandType = CommandType.StoredProcedure;
        aircmd.Parameters.AddWithValue("@pid", accountnumber.Text);
        aircmd.Parameters.AddWithValue("@eID", Request["pageId"]);
        aircmd.Parameters.AddWithValue("@txYr", txtTaxYr.Text);
        aircmd.Parameters.AddWithValue("@regno", txBoatRegNum);
        aircmd.Parameters.Add("@txretval", SqlDbType.Money).Value = decimal.Parse(txTaxPayerRet); //convert text back to money

        aircmd.ExecuteNonQuery();


        //Display some feedback to the user to let them know it was processed
        lblResult.ForeColor = System.Drawing.Color.Green;
        lblResult.Text = "Thank you! <br>You have successfully completed the form.";


        //If the message failed at some point, let the user know
        lblResult.ForeColor = System.Drawing.Color.Red;
        lblResult.Text = "Your form failed to save, please try again.";

    }
}

Re: Code is inserting only one row of records. Any ideas?

F-ES Sitecore11-Oct-17 0:54

F-ES Sitecore

11-Oct-17 0:54

What happens when you step through the code in the debugger?

Re: Code is inserting only one row of records. Any ideas?

ZurdoDev11-Oct-17 9:44

ZurdoDev

11-Oct-17 9:44

You need to debug it and see what is happening. We don't know what table.Rows is or what is in it so there is little we can do to help.

There are two kinds of people in the world: those who can extrapolate from incomplete data.

There are only 10 types of people in the world, those who understand binary and those who don't.

Have a form result invisible until submission?

The Rarispy8-Oct-17 16:48

The Rarispy

8-Oct-17 16:48

I wasn't completely sure which forum to put this in, ASP or JavaScript. Feel free to move it if it's not the appropriate spot.

I have a simple web application where the user inputs three integers into a form and receives the sum as a result.

My question is this: I'd like to have the actual sum value not appear until the user has Submitted. Meaning, when the page is opened up, the ViewBag just displays nothing. And then after submission, the ViewBag content appears. Is it possible for me to do this with the current code I have?

I'm aware this will probably require a JavaScript function. I just don't have very much experience integrating JS with C#.

View:

@{
    ViewBag.Title = "Index";
}

<h2>Index</h2>

<!-- HTML form with "Post" method initiated. -->
<form action="" method="post">

    Enter the 1st Number: <input id="firstInt" name="firstInt" type="text" value="0" /><br />
    Enter the 2nd Number: <input id="secondInt" name="secondInt" type="text" value="0" /><br />
    Enter the 3rd Number: <input id="thirdInt" name="thirdInt" type="text" value="0" /><br />

    <input id="Submit" type="submit" value="submit" />
    <input id="Reset" type="reset" value="reset" /><br /><br />
    Sum = @ViewBag.result
</form>

Controller:

public class HomeController : Controller
    {
        // GET: Home
        // Integers initiated in the index parameters.
        public ActionResult Index(int firstInt = 0, int secondInt = 0, int thirdInt = 0)
        {
            // Calculates sum of the three integers, and then sends result to the View.
            int sum = firstInt + secondInt + thirdInt;
            ViewBag.result = sum;
            return View();
        }
    }

modified 8-Oct-17 22:58pm.

Re: Have a form result invisible until submission?

Richard Deeming9-Oct-17 8:42