Support us .Net Basics C# SQL ASP.NET ADO.NET MVC Slides C# Programs Subscribe Buy DVD

Part 75 - RequireHttps attribute in mvc

Suggested Videos 
Part 72 - HandleError attribute
Part 73 - OutputCache attribute
Part 74 - CacheProfiles

In this video, we will discuss RequireHttps attribute. 

[RequireHttps] attribute forces an unsecured HTTP request to be re-sent over HTTPS. Let's understand [RequireHttps] attribute with an example.



Step 1: Create an asp.net mvc4 application using "Empty" template

Step 2: Add a HomeController. Copy and paste the Login() action method in the HomeController.
[RequireHttps]
public string Login()
{
    return "This method should be accessed only using HTTPS protocol";
}



Step 3: Try to navigate to http://localhost/MVCDemo/Home/Login. Notice that you are automatically redirected to https://localhost/MVCDemo/Home/Login. So, [RequireHttps] attribute, forces an HTTP request to be re-sent over HTTPS.
RequireHttps Attribute in mvc

RequireHttps attribute can be applied on a controller as well. In this case, it is applicable for all action methods with in that controller.

Sensitive data such as login credentials, credit card information etc, must always be transmitted using HTTPS. Information transmitted over https is encrypted.

2 comments:

  1. Hi Venkat,

    I get an error message when I do this.

    This webpage is not available

    ERR_CONNECTION_REFUSED

    ReplyDelete
  2. getting error unable to connect but redirecting to https page but not displaying text

    ReplyDelete

If you like this website, please share with your friends on facebook and Google+ and recommend us on google using the g+1 button on the top right hand corner.