Authentication in servicestack.razor

Question

I try to create complete web apps using ServiceStack.Razor. but got problem how to handle authentication in service and page.

handle unauthorized access in service quite easy as we can set authentication attributes. I have config authentication using credentialsAuthProvider and success authenticated using query string to /auth?username=&password and successfully access secured serviced.

but how to handle unauthorized access to services. currently it return 401 unauthorized access. so when user access the page it only shown blank page.. i have try to setup customhttphandler for unauthorized access to redirect to login page but not success

SetConfig(new EndpointHostConfig {
    DebugMode = true,
    CustomHttpHandlers = {
      { HttpStatusCode.NotFound, new RazorHandler("/notfound") },
      { HttpStatusCode.Unauthorized, new RazorHandler("/login") },
    }
});

Servicestack.razor allow creating Razor Page like Asp.Net WebPages but there is no sample how to handle authorization in page like using Request.IsAuthenticated. i have try that, but throw method not exists error.

And how to logout or destroy authentication session

Update: I am using ServiceStack.Razor with SelfHosting

I am not sure how to call UserSession to check user auth status in Razor. Not sure in general how auth works in Razor, neihter... Wanna know, too. — Tom, Oct 18 '12 at 16:06

score 3 · Accepted Answer · answered Jan 03 '13 at 01:13

3

In a ServiceStack Self Host scenario I was able to get access to the session within the Razor view like this:

@{
    var user = Request.GetSession();
}

Authenticated: @user.IsAuthenticated

answered Jan 03 '13 at 01:13

Justin Stenning

1,837
1
15
19

score 2 · Answer 2 · edited May 23 '17 at 11:51

Have to answer my self.. since no one come to answer and it will be a reference for others..

Service with Authorize attribute now redirected to login page, instead return black page now. please update latest servicestack release.

After trying many possibility to handle authentication on razor page, it can be achieve by accessing the cache in razor page.

@{
    var user = Cache.Get<AuthUserSession>(SessionKey);
}

@if (user != null && user.IsAuthenticated) {
    <h1>User @user.DisplayName is Logged</h1>
}

but with limitation that this only working in Asp.Net WebHost only. i still finding the way to make it working in Self Host.

For logout process can be achieve by create logout service where it remove session and redirected to login page.

    [Route("logout")]
public class Logout { }

public class UserService : Service
{
    public object Any (Logout r)
    {
        this.RemoveSession();
        return this.Redirect("/login");
    }
}

i'll try to make sample project with it and publish soon

Authentication in servicestack.razor

2 Answers2