How to redirect user to page after login?

Question

I am developing a web application, using Asp.Net MVC 5 com Identity and I’m using Roles to carry out the authorisation.

I’m trying to do that depending on the Role that the user has, it is directed to a different "Home" page.

Example:

• Administrators => Home Administration;
• Sellers => Home of the Commercial.

And so it goes. But I’m having a hard time finding a solution.

To redirect the user when denied access by Roles, I sub-wrote the method HandleUnauthorizedRequest:

  protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext)
    {
        if (!filterContext.HttpContext.User.Identity.IsAuthenticated)
        {
            // The user is not authenticated
            base.HandleUnauthorizedRequest(filterContext);
        }
        else if (!this.Roles.Split(',').Any(filterContext.HttpContext.User.IsInRole))
        {
            // The user is not in any of the listed roles => 
            // show the unauthorized view
            filterContext.Result = new ViewResult
            {
                ViewName = "~/Views/Shared/Page_403.cshtml"
            };
        }
        else
        {
            base.HandleUnauthorizedRequest(filterContext);
        }
    }

Now, to perform this redirect, after logging in? how would you do?

Controller Code Account:

        //
        // POST: /Account/Login
        [HttpPost]
        [AllowAnonymous]
        [ValidateAntiForgeryToken]
        public async Task<ActionResult> Login(LoginViewModel model, string returnUrl)
        {
            if (!ModelState.IsValid)
            {
                return View(model);
            }

            // This doesn't count login failures towards account lockout
            // To enable password failures to trigger account lockout, change to shouldLockout: true
            var result = await SignInManager.PasswordSignInAsync(model.Email, model.Password, model.RememberMe, shouldLockout: false);
            switch (result)
            {
                case SignInStatus.Success:
                    return RedirectToLocal(returnUrl);
                case SignInStatus.LockedOut:
                    return View("Lockout");
                case SignInStatus.RequiresVerification:
                    return RedirectToAction("SendCode", new { ReturnUrl = returnUrl, RememberMe = model.RememberMe });
                case SignInStatus.Failure:
                default:
                    ModelState.AddModelError("", "Invalid login attempt.");
                    return View(model);
            }
        }

When trying to validate using the condition: if(UserManager.IsInRole(User.Identity.GetUserId(), "admin")) error was generated:

Code of HomeController:

public class HomeController : Controller
{
    [PermissoesFiltro]
    public ActionResult Index()
    {
        return View();
    }

    [PermissoesFiltro(Roles = "Comercial")]
    public ActionResult Index_Comercial()
    {
        return View();
    }

    [PermissoesFiltro(Roles = "Master")]
    public ActionResult Index_Master()
    {
        return View();
    }

Tables of Identity:

Answer 1

There is a property of controller calling for User, once the login is successfully performed this property will have a value (information about the identity of the logged-in user). That’s not quite true, see update below;

This property will be "powered" by Identity and needs to implement the interface IPrincipal. In this interface, there is the method IsInRole(string role) which is exactly what you need.

I’m going to focus on the part of the code that really matters, what’s going to be done in there depends on what’s really needed for your project, you can do a database query to retrieve the URL, you can do more validations. The important thing is to understand that User.IsInRole serves exactly what you need.

case SignInStatus.Success:
    {        
        if(User.IsInRole("Admin")) // Se o usuário estiver na role admin
            return RedirectToLocal("UrlAdmin"); //Redireciona para uma URL pré-definida
        
        return RedirectToLocal(returnUrl);    
    }

---

Updating

In fact, the property User is still empty at the time of Login, so it will be necessary another strategy to recover the currently logged in user.

var user = await UserManager.FindAsync(model.Email, model.Password); 

if (UserManager.IsInRole(user.Id, "Admin"))
    return RedirectToAction("Home_Admin", "Controller"); //A forma de redirect que irá usar

UserManager is a property of AccountController.

Answer 2

You can try to override the authorization method OnAuthorization, Passing the route values, by default are three route values: controller, action and area, the latter if there is an area. As you have already overwritten the method HandleUnauthorizedRequest, is consistent to overwrite the authorization also, leaving in one place the processing of redirects.

 public override void OnAuthorization(AuthorizationContext filterContext)
    {
        var dicRota = new Dictionary<string, object>();

        if (filterContext.HttpContext.User.IsInRole("Admin"))
        {
            dicRota.Add("controller", "Admin");
            dicRota.Add("action", "Home");
        }
        else if (filterContext.HttpContext.User.IsInRole("Vendedores"))
        {
            dicRota.Add("controller", "Comercial");
            dicRota.Add("action", "Home");
        }

        filterContext.Result = new RedirectToRouteResult(new RouteValueDictionary(dicRota));
    }