Question

I would like to create my custom authorization filter. I see that in System.Web.Http.AuthorizeAttribute there are two similar methods IsAuthorized and OnAuthorization. Which one should I override and why?

Was it helpful?

Solution

You should override IsAuthorized, which "Determines whether access for this particular request is authorized."

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top