public void OnAuthentication(AuthenticationContext filterContext)
{
var httpContext = filterContext.RequestContext.HttpContext;
var service = new AuthenticationTicketService();
var ticket = service.GetTicket(httpContext.Request.Cookies);
if (ticket == null)
{
LogService.Debug("User is not logged in (no authentication ticket)");
LogService.Debug("User.IsAuthenticated {0}", httpContext.User.Identity.IsAuthenticated);
return;
}
if (IsCookieExpired(filterContext, service, ticket))
{
LogService.Debug("User cookie is expired.");
filterContext.Result = new RedirectToRouteResult(RouteNames.SignOut, new RouteValueDictionary());
}
var claims = service.GetClaims(ticket);
httpContext.User = new GenericPrincipal(new FormsIdentity(ticket), claims);
LogService.Debug("User.IsAuthenticated {0}", httpContext.User.Identity.IsAuthenticated);
LogService.Debug("Claims {0}", string.Join(",", claims));
LogService.Debug("Activated: {0}", httpContext.User.IsInRole(UserRoleNames.Activated));
LogService.Debug("Unactivated: {0}", httpContext.User.IsInRole(UserRoleNames.Unactivated));
}
private static bool IsCookieExpired(AuthenticationContext filterContext, AuthenticationTicketService service,
FormsAuthenticationTicket ticket)
{
var expirationTime = service.GetExpirationTimeFrom(ticket);
return(expirationTime < DateTime.Now && !SigningOut(filterContext));
}
private bool IsCookieExpired(AuthenticationContext filterContext, FormsAuthenticationTicket ticket)
{
var expirationTime = new AuthenticationTicketService(filterContext.RequestContext.HttpContext, LogService).GetExpirationTimeFrom(ticket);
return(expirationTime < DateTime.UtcNow && !SigningOut(filterContext));
}
