如何處理會話超時在MVC 3

Question

我有頻繁的會話超時問題。

我想寫我可以每個控制器上使用共同的過濾器，過濾器應該將用戶重定向到登錄，登錄回從那裏用戶發送的最後一個請求後。

Answer 1

你可以嘗試這樣的事：

public class SessionExpireAttribute : ActionFilterAttribute { 
    public override void OnActionExecuted(ActionExecutedContext filterContext) { 
     base.OnActionExecuted(filterContext); 
    } 

    public override void OnActionExecuting(ActionExecutingContext filterContext) { 
     if (filterContext.HttpContext.Session != null) { 
      if (filterContext.HttpContext.Session.IsNewSession) { 
       var sessionCookie = filterContext.HttpContext.Request.Headers["Cookie"]; 
       if ((sessionCookie != null) && (sessionCookie.IndexOf("ASP.NET_SessionId") >= 0)) { 
        // redirect to login 
       } 
      } 
     } 
    } 
} 

Answer 2

你試過現有授權過濾器？

Answer 3

如上所述..嘗試這個

public class SessionExpireAttribute : ActionFilterAttribute { 

    public override void OnActionExecuting(ActionExecutingContext filterContext) { 
     if (filterContext.HttpContext.Session != null) { 
      if (filterContext.HttpContext.Session.IsNewSession) { 
       filterContext.Result = new RedirectResult("/");//redirect to home page 
      } 
     } 
    } 
} 

，然後通過動作或控制器[SessionExpire]

Answer 4

還有更多這裏比滿足眼睛應用此過濾器。這是一個更完整的OnActionExecuting，它使用了上面已經討論過的相同的概念，但增加了一些。有關更多信息，請參閱行內評論。被調用的「InitializeSession」是一個自定義函數，它創建會話狀態中運行該站點所需的基本屬性。 「AlertWarning」是用於顯示警報的Helper例程。其他一切都是樣板代碼。

protected override void OnActionExecuting(ActionExecutingContext filterContext) 
{ 
    var bRequiresAuthorization = 
    (filterContext.ActionDescriptor.GetCustomAttributes(typeof(AuthorizeAttribute), false).Length > 0) || 
    (filterContext.Controller.GetType().GetCustomAttributes(typeof(AuthorizeAttribute), false).Length > 0); 

    if (filterContext.HttpContext.Session != null) 
    { 
    if (filterContext.HttpContext.Session.IsNewSession) 
    { 
     //New session. Initialize Session State 
     bool b = InitializeSession(null); 

     if (bRequiresAuthorization) 
     { 
     //Action requested requires authorized access. User needs to authenticate this 
     //new session first, so redirect to login 
     string cookie = filterContext.HttpContext.Request.Headers["Cookie"]; 
     if ((cookie != null) && (cookie.IndexOf("_SessionId=") >= 0)) 
     { 
      //An expired session cookie still resides on this PC, so first alert user that session is expired 
      AlertWarning("Session timed out due to inactivity. Please log in again."); 
     } 
     filterContext.Result = RedirectToAction("LogOut", "Authentication"); 
     } 
    } 
    } 

    base.OnActionExecuting(filterContext); 

}