Skip to main content

MVC Web API Authorization and Authentication

Hello everyone, I am going to share the code-sample to Authentication and Authorization the MVC.Net Web API 2.

·         If Web API 2 Missing header then return 404 Bad request with Authorization Token - Missing messages.
·         If Web API 2 call is unauthorized then return 401 Unauthorized  with unauthorized user.
·         If Web API 2 call is invalid then return authorization Token - Invalid messages.
·         If Web API 2 request is valid then ok.

There are fallowing steps to achieve the MVC API Authorization as given below.

Step1 : Call APIs using AJAX request.

this.getAddress = function (Ids) {
      return $http({
                        method: 'GET',
                        url: " http://localhost:9669/api/userProfile/GetAddress?id=" + Ids,
                        headers: {Authorization : 'anil.singh@code-sample.com'}
             // Write header as per you.
            });
};

Step 2: Let's start step 2 as given below.

Create a class " APIAuthorizationHandler .cs" for Authorization and Authentication to APIs and APIAuthorizationHandler is inherited to the DelegatingHandler .

Write Authentication logic in API Authorization Handler class which are given below.

namespace Employee.Models
{
    public class APIAuthorizationHandler : DelegatingHandler
    {
        // Added http response custom messages.
        private const string TokenInvalid = "Authorization Token - Invalid";
        private const string TokenMissing = "Authorization Token - Missing";

        protected override Task<HttpResponseMessage> SendAsync(HttpRequestMessage request, CancellationToken cancellationToken)
        {
            IEnumerable<string> ApplicationHeaderApiValues = null;

            // Checking the Header values
            if (request.Headers.TryGetValues("Authorization ", out ApplicationHeaderApiValues))
            {
                string[] apiKeyHeaderValue = ApplicationHeaderApiValues.First().Split(':');

                // Checking  length
                if (apiKeyHeaderValue.Length > 0)
                {
                    // Code logic after authenticate the application.
                    var appAutho = apiKeyHeaderValue[0];

                    if (appAutho.Equals(HttpContext.Current.User.Identity.Name))
                    {
                        var userNameClaim = new Claim(ClaimTypes.Name, appAutho);
                        var identity = new ClaimsIdentity(new[] { userNameClaim }, "ApplicationHeader");
                        var principal = new ClaimsPrincipal(identity);
                        Thread.CurrentPrincipal = principal;

                        if (HttpContext.Current != null)
                        {
                            HttpContext.Current.User = principal;
                        }
                    }
                    else
                    {
                        return requestCancel(request, cancellationToken, TokenInvalid);
                    }
                }
                else
                {
                    return requestCancel(request, cancellationToken, TokenMissing);
                }
            }
            else
            {
                return requestCancel(request, cancellationToken, TokenMissing);
            }

            return base.SendAsync(request, cancellationToken);
        }

        // Web request cancel call due to missing APIID, APIID is NULL, missing all parameters etc.
        private Task<HttpResponseMessage> requestCancel(HttpRequestMessage requestMsg, CancellationToken cancellationToken, string msg)
        {
            CancellationTokenSource tokenSource = new CancellationTokenSource();
            HttpResponseMessage responseMsg = new HttpResponseMessage();

            cancellationToken = tokenSource.Token;
            tokenSource.Cancel();

            responseMsg = requestMsg.CreateResponse(HttpStatusCode.BadRequest);
            responseMsg.Content = new StringContent(msg);

            return base.SendAsync(requestMsg, cancellationToken).ContinueWith(task =>
            {
                return responseMsg;
            });
        }
    }
}

Step : 3  Configuration to Message Handlers in Global.asax.cs class. i.e.

public class MvcApplication : System.Web.HttpApplication
{
        protected void Application_Start()
        {
            AreaRegistration.RegisterAllAreas();
            GlobalConfiguration.Configure(WebApiConfig.Register);
            FilterConfig.RegisterGlobalFilters(GlobalFilters.Filters);
            RouteConfig.RegisterRoutes(RouteTable.Routes);
            BundleConfig.RegisterBundles(BundleTable.Bundles);

            //Configuration to MessageHandlers for API Authorization handler.
            GlobalConfiguration.Configuration.MessageHandlers.Add(new APIAuthorizationHandler());
        }
}

The output : Please see given below the images





By Anil Singh | Rating of this article (*****)

Popular posts from this blog

39 Best Object Oriented JavaScript Interview Questions and Answers

Most Popular 37 Key Questions for JavaScript Interviews. What is Object in JavaScript? What is the Prototype object in JavaScript and how it is used? What is "this"? What is its value? Explain why "self" is needed instead of "this". What is a Closure and why are they so useful to us? Explain how to write class methods vs. instance methods. Can you explain the difference between == and ===? Can you explain the difference between call and apply? Explain why Asynchronous code is important in JavaScript? Can you please tell me a story about JavaScript performance problems? Tell me your JavaScript Naming Convention? How do you define a class and its constructor? What is Hoisted in JavaScript? What is function overloadin

List of Countries, Nationalities and their Code In Excel File

Download JSON file for this List - Click on JSON file    Countries List, Nationalities and Code Excel ID Country Country Code Nationality Person 1 UNITED KINGDOM GB British a Briton 2 ARGENTINA AR Argentinian an Argentinian 3 AUSTRALIA AU Australian an Australian 4 BAHAMAS BS Bahamian a Bahamian 5 BELGIUM BE Belgian a Belgian 6 BRAZIL BR Brazilian a Brazilian 7 CANADA CA Canadian a Canadian 8 CHINA CN Chinese a Chinese 9 COLOMBIA CO Colombian a Colombian 10 CUBA CU Cuban a Cuban 11 DOMINICAN REPUBLIC DO Dominican a Dominican 12 ECUADOR EC Ecuadorean an Ecuadorean 13 EL SALVADOR

AngularJs input date format calendar

Table of Context bout  the input date.  Click for live demo on plnker 1. Allow to use of a custom date format like "yyyy/MM/dd" or "yyyy-MM-dd" etc. 2. Allow to check the input date typed by the user is correct or not. 1 2 3 4 //The model must be a Date object, otherwise Angular will throw an error. //The error is Invalid Date objects will be rendered as an empty string. i.e. The dates whose getTime() is NaN. //The model must be a Date object, otherwise Angular will throw an error. //The error is Invalid Date objects will be rendered as an empty string. i.e. The dates whose getTime() is NaN. The Example 1 code as given below. 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 <!doctype html> <html lang= "en" > <head>      <meta charset= "utf-8" />      <script src= " http://ajax.googleapis.com/ajax/lib

25 Best Vue.js 2 Interview Questions and Answers

What Is Vue.js? The Vue.js is a progressive JavaScript framework and used to building the interactive user interfaces and also it’s focused on the view layer only (front end). The Vue.js is easy to integrate with other libraries and others existing projects. Vue.js is very popular for Single Page Applications developments. The Vue.js is lighter, smaller in size and so faster. It also supports the MVVM ( Model-View-ViewModel ) pattern. The Vue.js is supporting to multiple Components and libraries like - ü   Tables and data grids ü   Notifications ü   Loader ü   Calendar ü   Display time, date and age ü   Progress Bar ü   Tooltip ü   Overlay ü   Icons ü   Menu ü   Charts ü   Map ü   Pdf viewer ü   And so on The Vue.js was developed by “ Evan You ”, an Ex Google software engineer. The latest version is Vue.js 2. The Vue.js 2 is very similar to Angular because Evan You was inspired by Angular and the Vue.js 2 components looks like -

nullinjectorerror no provider for httpclient angular 17

In Angular 17 where the standalone true option is set by default, the app.config.ts file is generated in src/app/ and provideHttpClient(). We can be added to the list of providers in app.config.ts Step 1:   To provide HttpClient in a standalone app we could do this in the app.config.ts file, app.config.ts: import { ApplicationConfig } from '@angular/core'; import { provideRouter } from '@angular/router'; import { routes } from './app.routes'; import { provideClientHydration } from '@angular/platform-browser'; //This (provideHttpClient) will help us to resolve the issue  import {provideHttpClient} from '@angular/common/http'; export const appConfig: ApplicationConfig = {   providers: [ provideRouter(routes),  provideClientHydration(), provideHttpClient ()      ] }; The appConfig const is used in the main.ts file, see the code, main.ts : import { bootstrapApplication } from '@angular/platform-browser'; import { appConfig } from '