Unit testing ASP.Net MVC Authorize attribute to verify redirect to login page

by

You are testing at the wrong level. The [Authorize] attribute ensures that the routing engine will never invoke that method for an unauthorized user – the RedirectResult will actually be coming from the route, not from your controller method.

Good news is – there’s already test coverage for this (as part of the MVC framework source code), so I’d say you don’t need to worry about it; just make sure your controller method does the right thing when it gets called, and trust the framework not to call it in the wrong circumstances.

EDIT: If you want to verify the presence of the attribute in your unit tests, you’ll need to use reflection to inspect your controller methods as follows. This example will verify the presence of the Authorize attribute on the ChangePassword POST method in the ‘New ASP.NET MVC 2 Project’ demo that’s installed with MVC2. 

[TestFixture]
public class AccountControllerTests {

    [Test]
    public void Verify_ChangePassword_Method_Is_Decorated_With_Authorize_Attribute() {
        var controller = new AccountController();
        var type = controller.GetType();
        var methodInfo = type.GetMethod("ChangePassword", new Type[] { typeof(ChangePasswordModel) });
        var attributes = methodInfo.GetCustomAttributes(typeof(AuthorizeAttribute), true);
        Assert.IsTrue(attributes.Any(), "No AuthorizeAttribute found on ChangePassword(ChangePasswordModel model) method");
    }
}

More Related Contents:

  1. How to find just Current time and just day in mvc [closed]
  2. MVC5 Razor html.dropdownlistfor set selected when value is in array
  3. Why is JsonRequestBehavior needed?
  4. Passing data between different controller action methods
  5. Is Task.Run considered bad practice in an ASP .NET MVC Web Application?
  6. ViewModels in MVC / MVVM / Separation of layers- best practices?
  7. How does MVC 4 List Model Binding work?
  8. Passing data to Master Page in ASP.NET MVC
  9. @Html.Action in Asp.Net Core
  10. How to enable cross origin requests in ASP.NET MVC [duplicate]
  11. Do I need a Global.asax.cs file at all if I’m using an OWIN Startup.cs class and move all configuration there?
  12. GET and POST methods with the same Action name in the same Controller [duplicate]
  13. How do I display the DisplayAttribute.Description attribute value?
  14. MVC 4 how pass data correctly from controller to view
  15. How to extend IdentityUser with custom property
  16. How to know the selected checkboxes from within the HttpPost Create action method?
  17. MvcSiteMap generating a Menu without messing the breadcumbs
  18. Possible to access MVC ViewBag object from Javascript file?
  19. “this” in function parameter
  20. Method ‘RouteCollection.get_AppendTrailingSlash’ not found when using Razor Url helpers in ASP.NET MVC 5 Mono
  21. Set Default DateTime Format c#
  22. Read HttpContent in WebApi controller
  23. Entities VS Domain Models VS View Models
  24. Model Binding to Enums in ASP.NET MVC 3
  25. Get UserID of logged-in user in Asp.Net MVC 5
  26. ASP.NET Web API and [Serializable] class
  27. The field must be a date – DatePicker validation fails in Chrome – mvc
  28. Specify Date format in MVC5 (dd/MM/yyyy)
  29. What is the difference between DependencyResolver.SetResolver and HttpConfiguration.DependencyResolver in WebAPI
  30. LINQ to Entities does not recognize the method ‘System.String ToString()’ method in MVC 4

Leave a Comment