Skip to main content

MVC Web API Authorization and Authentication

Hello everyone, I am going to share the code-sample to Authentication and Authorization the MVC.Net Web API 2.

·         If Web API 2 Missing header then return 404 Bad request with Authorization Token - Missing messages.
·         If Web API 2 call is unauthorized then return 401 Unauthorized  with unauthorized user.
·         If Web API 2 call is invalid then return authorization Token - Invalid messages.
·         If Web API 2 request is valid then ok.

There are fallowing steps to achieve the MVC API Authorization as given below.

Step1 : Call APIs using AJAX request.

this.getAddress = function (Ids) {
      return $http({
                        method: 'GET',
                        url: " http://localhost:9669/api/userProfile/GetAddress?id=" + Ids,
                        headers: {Authorization : 'anil.singh@code-sample.com'}
             // Write header as per you.
            });
};

Step 2: Let's start step 2 as given below.

Create a class " APIAuthorizationHandler .cs" for Authorization and Authentication to APIs and APIAuthorizationHandler is inherited to the DelegatingHandler .

Write Authentication logic in API Authorization Handler class which are given below.

namespace Employee.Models
{
    public class APIAuthorizationHandler : DelegatingHandler
    {
        // Added http response custom messages.
        private const string TokenInvalid = "Authorization Token - Invalid";
        private const string TokenMissing = "Authorization Token - Missing";

        protected override Task<HttpResponseMessage> SendAsync(HttpRequestMessage request, CancellationToken cancellationToken)
        {
            IEnumerable<string> ApplicationHeaderApiValues = null;

            // Checking the Header values
            if (request.Headers.TryGetValues("Authorization ", out ApplicationHeaderApiValues))
            {
                string[] apiKeyHeaderValue = ApplicationHeaderApiValues.First().Split(':');

                // Checking  length
                if (apiKeyHeaderValue.Length > 0)
                {
                    // Code logic after authenticate the application.
                    var appAutho = apiKeyHeaderValue[0];

                    if (appAutho.Equals(HttpContext.Current.User.Identity.Name))
                    {
                        var userNameClaim = new Claim(ClaimTypes.Name, appAutho);
                        var identity = new ClaimsIdentity(new[] { userNameClaim }, "ApplicationHeader");
                        var principal = new ClaimsPrincipal(identity);
                        Thread.CurrentPrincipal = principal;

                        if (HttpContext.Current != null)
                        {
                            HttpContext.Current.User = principal;
                        }
                    }
                    else
                    {
                        return requestCancel(request, cancellationToken, TokenInvalid);
                    }
                }
                else
                {
                    return requestCancel(request, cancellationToken, TokenMissing);
                }
            }
            else
            {
                return requestCancel(request, cancellationToken, TokenMissing);
            }

            return base.SendAsync(request, cancellationToken);
        }

        // Web request cancel call due to missing APIID, APIID is NULL, missing all parameters etc.
        private Task<HttpResponseMessage> requestCancel(HttpRequestMessage requestMsg, CancellationToken cancellationToken, string msg)
        {
            CancellationTokenSource tokenSource = new CancellationTokenSource();
            HttpResponseMessage responseMsg = new HttpResponseMessage();

            cancellationToken = tokenSource.Token;
            tokenSource.Cancel();

            responseMsg = requestMsg.CreateResponse(HttpStatusCode.BadRequest);
            responseMsg.Content = new StringContent(msg);

            return base.SendAsync(requestMsg, cancellationToken).ContinueWith(task =>
            {
                return responseMsg;
            });
        }
    }
}

Step : 3  Configuration to Message Handlers in Global.asax.cs class. i.e.

public class MvcApplication : System.Web.HttpApplication
{
        protected void Application_Start()
        {
            AreaRegistration.RegisterAllAreas();
            GlobalConfiguration.Configure(WebApiConfig.Register);
            FilterConfig.RegisterGlobalFilters(GlobalFilters.Filters);
            RouteConfig.RegisterRoutes(RouteTable.Routes);
            BundleConfig.RegisterBundles(BundleTable.Bundles);

            //Configuration to MessageHandlers for API Authorization handler.
            GlobalConfiguration.Configuration.MessageHandlers.Add(new APIAuthorizationHandler());
        }
}

The output : Please see given below the images





By Anil Singh | Rating of this article (*****)

Popular posts from this blog

List of Countries, Nationalities and their Code In Excel File

Download JSON file for this List - Click on JSON file    Countries List, Nationalities and Code Excel ID Country Country Code Nationality Person 1 UNITED KINGDOM GB British a Briton 2 ARGENTINA AR Argentinian an Argentinian 3 AUSTRALIA AU Australian an Australian 4 BAHAMAS BS Bahamian a Bahamian 5 BELGIUM BE Belgian a Belgian 6 BRAZIL BR Brazilian a Brazilian 7 CANADA CA Canadian a Canadian 8 CHINA CN Chinese a Chinese 9 COLOMBIA CO Colombian a Colombian 10 CUBA CU Cuban a Cuban 11 DOMINICAN REPUBLIC DO Dominican a Dominican 12 ECUADOR EC Ecuadorean an Ecuadorean 13 EL SALVADOR

39 Best Object Oriented JavaScript Interview Questions and Answers

Most Popular 37 Key Questions for JavaScript Interviews. What is Object in JavaScript? What is the Prototype object in JavaScript and how it is used? What is "this"? What is its value? Explain why "self" is needed instead of "this". What is a Closure and why are they so useful to us? Explain how to write class methods vs. instance methods. Can you explain the difference between == and ===? Can you explain the difference between call and apply? Explain why Asynchronous code is important in JavaScript? Can you please tell me a story about JavaScript performance problems? Tell me your JavaScript Naming Convention? How do you define a class and its constructor? What is Hoisted in JavaScript? What is function overloadin

React | Encryption and Decryption Data/Text using CryptoJs

To encrypt and decrypt data, simply use encrypt () and decrypt () function from an instance of crypto-js. Node.js (Install) Requirements: 1.       Node.js 2.       npm (Node.js package manager) 3.       npm install crypto-js npm   install   crypto - js Usage - Step 1 - Import var   CryptoJS  =  require ( "crypto-js" ); Step 2 - Encrypt    // Encrypt    var   ciphertext  =  CryptoJS . AES . encrypt ( JSON . stringify ( data ),  'my-secret-key@123' ). toString (); Step 3 -Decrypt    // Decrypt    var   bytes  =  CryptoJS . AES . decrypt ( ciphertext ,  'my-secret-key@123' );    var   decryptedData  =  JSON . parse ( bytes . toString ( CryptoJS . enc . Utf8 )); As an Example,   import   React   from   'react' ; import   './App.css' ; //Including all libraries, for access to extra methods. var   CryptoJS  =  require ( "crypto-js" ); function   App () {    var   data

25 Best Vue.js 2 Interview Questions and Answers

What Is Vue.js? The Vue.js is a progressive JavaScript framework and used to building the interactive user interfaces and also it’s focused on the view layer only (front end). The Vue.js is easy to integrate with other libraries and others existing projects. Vue.js is very popular for Single Page Applications developments. The Vue.js is lighter, smaller in size and so faster. It also supports the MVVM ( Model-View-ViewModel ) pattern. The Vue.js is supporting to multiple Components and libraries like - ü   Tables and data grids ü   Notifications ü   Loader ü   Calendar ü   Display time, date and age ü   Progress Bar ü   Tooltip ü   Overlay ü   Icons ü   Menu ü   Charts ü   Map ü   Pdf viewer ü   And so on The Vue.js was developed by “ Evan You ”, an Ex Google software engineer. The latest version is Vue.js 2. The Vue.js 2 is very similar to Angular because Evan You was inspired by Angular and the Vue.js 2 components looks like -

Encryption and Decryption Data/Password in Angular

You can use crypto.js to encrypt data. We have used 'crypto-js'.   Follow the below steps, Steps 1 –  Install CryptoJS using below NPM commands in your project directory npm install crypto-js --save npm install @types/crypto-js –save After installing both above commands it looks like  – NPM Command  1 ->   npm install crypto-js --save NPM Command  2 ->   npm install @types/crypto-js --save Steps 2  - Add the script path in “ angular.json ” file. "scripts" : [                "../node_modules/crypto-js/crypto-js.js"               ] Steps 3 –  Create a service class “ EncrDecrService ” for  encrypts and decrypts get/set methods . Import “ CryptoJS ” in the service for using  encrypt and decrypt get/set methods . import  {  Injectable  }  from   '@angular/core' ; import   *   as   CryptoJS   from   'crypto-js' ; @ Injectable ({    providedIn:   'root' }) export   class   EncrDecrS