重定向到RETURNURL不工作

Question

在参考this posted question

给出的答案不为我工作，我在这里有同样的问题。

我也使用aspnet身份验证，用户可以尝试导航到网站上的任何页面，特别是用户导航到类似/ mycontroller/myaction/25的地方很常见，其中25是帐户或该用户经常使用的产品标识符。

如果用户在尝试访问该URL时当前未通过身份验证，则会将其重定向到登录屏幕。登录后，重定向（returnURL）不会将用户导航到请求的页面。该页面保留在登录屏幕上。

，用户将粘贴到登录前的地址栏中的URL可能是：

http://localhost:4082/Account/LogOn?ReturnUrl=%2fProduct%2fEdit%2f59 

输入凭据和调试看到的凭据进行身份验证后，URL是一样的

http://localhost:4082/Account/LogOn?ReturnUrl=%2fProduct%2fEdit%2f59 

股票mvc项目和我的区别在于，我不仅仅是登录时发生的登录动作。这里是我的代码：（我明明通过使各功能小破东西，包含）

public ActionResult LogOn() { 
    if (User.Identity.IsAuthenticated) 
     return RedirectToAction("Index", "Home"); 
    var model = new LogOnViewModel(); 
    return View(model); 
} 

[HttpPost] 
public ActionResult LogOn(LogOnViewModel model, string returnUrl) { 
    if (ModelState.IsValid) { 
     try { 
      return AttemptToAuthenticateUser(model, returnUrl); 
     } 
     catch (Exception ex) { 
      ModelState.AddModelError("", ex.Message); 
     } 
    } 
    return View(model); 
} 

private ActionResult AttemptToAuthenticateUser(LogOnViewModel model, string returnUrl) { 
    var membershipUser = GetUserFromMembershipProvider(model.Username, false); 
    var audit = new LoginAudit(model.Username, model.Password, Request.Browser.Browser, Request.Browser.Type, Request.UserHostAddress); 
    VerifyUserAccountIsApprovedNotLockedOut(membershipUser); 
    AuthenticateCredentials(model, audit); 
    AuditLogon(audit, model.Username, true); 
    return ForwardToLogonResultAction(membershipUser, returnUrl, model.RememberMe); 
} 

internal static MembershipUser GetUserFromMembershipProvider(string username, bool isUserCurrentlyLoggedIn) { 
    var membershipUser = Membership.GetUser(username, isUserCurrentlyLoggedIn); 
    if (membershipUser == null) 
     throw new Exception("The user account was not found"); 
    return membershipUser; 
} 

internal static void VerifyUserAccountIsApprovedNotLockedOut(MembershipUser membershipUser) { 
    if (membershipUser.IsLockedOut || !membershipUser.IsApproved) 
     throw new Exception("This account has been disabled or has been locked out. Please contact Administration for support"); 
} 

private void AuthenticateCredentials(LogOnViewModel model, LoginAudit audit) { 
    if (Membership.ValidateUser(model.Username, model.Password)) { } 
    else { 
     AuditLogon(audit, model.Username, false); 
     throw new Exception("The user name or password provided is incorrect"); 
    } 
} 

private void AuditLogon(LoginAudit audit, string username, bool isSuccessfullyAuthenticated) { 
    if (isSuccessfullyAuthenticated) 
     audit.Password = string.Empty; 
    audit.Save(username); 
} 

private ActionResult ForwardToLogonResultAction(MembershipUser currentMembershipUser, string returnUrl, bool rememberMe) { 
    if (IsPasswordOnAccountTemporary((Guid)currentMembershipUser.ProviderUserKey)) 
     return RedirectToAction("Edit", "ChangePassword"); 
    if (Url.IsLocalUrl(returnUrl) && returnUrl.Length > 1 && returnUrl.StartsWith("/") && !returnUrl.StartsWith("//") && !returnUrl.StartsWith("/\\")) { 
     return Redirect(returnUrl); 
    } 
    return ForwardUserToHomePage(currentMembershipUser.UserName, rememberMe); 
} 

private bool IsPasswordOnAccountTemporary(Guid userGUID) { 
    var profile = new Profile(userGUID); 
    return profile.IsTemporaryPassword; 
} 

更新

我试图改变后采取措施才能使RETURNURL检查是在同一个行动，但它仍然不能正常工作：

[HttpPost] 
    public ActionResult LogOn(LogOnViewModel model, string returnUrl) { 
     if (ModelState.IsValid) { 
      try { 
       AttemptToAuthenticateUser(model, returnUrl); 
       if (Url.IsLocalUrl(returnUrl) && returnUrl.Length > 1 && returnUrl.StartsWith("/") && !returnUrl.StartsWith("//") && !returnUrl.StartsWith("/\\")) 
        return Redirect(returnUrl); 
       return ForwardUserToHomePage(model.Username, model.RememberMe); 
      } 
      catch (Exception ex) { 
       ModelState.AddModelError("", ex.Message); 
      } 
     } 
     return View(model); 
    } 

更新2 更改我的代码返回的路上我orginally了它，它的作品完美......所以这告诉我，有更多的事情要做的排序的什么我比其他任何事情都做得更好......去尝试重新开始，责令较小的方法来匹配这个动作的顺序，并看看会发生什么

[HttpPost] 
    public ActionResult LogOn(LogOnViewModel model, string returnUrl) { 
     if (ModelState.IsValid) { 
      MembershipUser currentUser; 
      var audit = new LoginAudit(model.Username, model.Password, Request.Browser.Browser, Request.Browser.Type, Request.UserHostAddress); 
      if (Membership.ValidateUser(model.Username, model.Password)) { 
       audit.Password = string.Empty; 
       FormsAuthentication.SetAuthCookie(model.Username, model.RememberMe); 
       currentUser = Membership.GetUser(model.Username, true); 
       if (currentUser != null && currentUser.ProviderUserKey != null) { 
        var profile = new Profile((Guid)currentUser.ProviderUserKey); 
        if (profile.IsTemporaryPassword) 
         return RedirectToAction("Edit", "ChangePassword"); 
       } 
       if (Url.IsLocalUrl(returnUrl) && returnUrl.Length > 1 && returnUrl.StartsWith("/") 
        && !returnUrl.StartsWith("//") && !returnUrl.StartsWith("/\\")) { 
        return Redirect(returnUrl); 
       } 
       return RedirectToAction("Index", "Home"); 
      } 
      currentUser = Membership.GetUser(model.Username, false); 
      if (currentUser != null && (currentUser.IsLockedOut || !currentUser.IsApproved)) { 
       ModelState.AddModelError("", "This account has been locked out. Please contact ELM Administration for support."); 
      } 
      else { 
       ModelState.AddModelError("", "The user name or password provided is incorrect."); 
      } 
      audit.Save(model.Username); 
     } 
     return View(model); 
    } 

UDPATE 3

这固定它，得到它我自己:-)

private void AuthenticateCredentials(LogOnViewModel model, LoginAudit audit) { 
     if (Membership.ValidateUser(model.Username, model.Password)) { 
      FormsAuthentication.SetAuthCookie(model.Username, model.RememberMe); 
     } 
     else { 
      AuditLogon(audit, model.Username, false); 
      throw new Exception("The user name or password provided is incorrect"); 
     } 
    } 

Answer 1

解决的办法是比以前更早地设置cookie。我只是在设置Cookie时调用ForwardUserToHomePage方法，然后重定向到home/index才设置cookie。但由于该方法从来没有被调用，因为我正在做一个重定向（returnUrl），而cookie没有设置。由于没有设置，重定向失败，因为客户认为该用户尚未登录，因此登录页面实际上被“再次点击”。

修改了我的AuthenticateCredentials方法是：

private void AuthenticateCredentials(LogOnViewModel model, LoginAudit audit) { 
     if (Membership.ValidateUser(model.Username, model.Password)) { 
      FormsAuthentication.SetAuthCookie(model.Username, model.RememberMe); 
     } 
     else { 
      AuditLogon(audit, model.Username, false); 
      throw new Exception("The user name or password provided is incorrect"); 
     } 
    } 

Answer 2

在你Logon查看，你是否将网址传递给HttpPost方法？

@using (Html.BeginForm("LogOn", "Account", new { returnUrl= Request.QueryString["ReturnUrl"] })) 
{ 
    //your form elements 
    <input type="submit" value="Login" /> 
}