LiterallyAnything fucked around with this message at 01:08 on Nov 12, 2015

EssOEss fucked around with this message at 08:11 on Nov 12, 2015

public class MyApiController : ApiController
{
    [HttpGet]
    [Authorize(Roles = "ViewTickets")]
    public Ticket GetTicket(int id)
    {
        return ticketService.GetTicket(id);
    }
}

{
    "access_token": "jfd2zJtdC...",
    "token_type": "bearer",
    "expires_in": 1209599,
    "userName": "blah",
    ".issued": "Thu, 12 Nov 2015 17:58:37 GMT",
    ".expires": "Thu, 26 Nov 2015 17:58:37 GMT"
}

epswing fucked around with this message at 22:32 on Nov 12, 2015

public class CustomAuthorizeAttribute : AuthorizeAttribute
{
    public override void OnAuthorization(AuthorizationContext filterContext)
    {
        if (!filterContext.HttpContext.Request.IsAuthenticated)
        {
            // Redirect to login page
            filterContext.Result = Redirect("Login", "Index")'
            return;
        }

        var roles = GetRolesFromDb();
        if (Roles.Any(r => roles.Contains(r)))
            return;
        else
            filterContext.Result = Redirect("Error", "AccessDenied");
    }

    private RedirectToRouteResult Redirect(string controller, string action, string area = "")
    {
        return new RedirectToRouteResult(new RouteValueDictionary(new
        {
            controller,
            action,
            area,
        });
    }
}

Bognar fucked around with this message at 23:09 on Nov 12, 2015

[AttributeUsage(AttributeTargets.Method, AllowMultiple = false)]
public class AuthorizeExAttribute : System.Web.Http.AuthorizeAttribute
{
    public string[] RolesArray { get; set; }

    public AuthorizeExAttribute(params string[] roles)
    {
        Roles = string.Join(",", roles);
        RolesArray = roles;
    }

    protected override bool IsAuthorized(HttpActionContext actionContext)
    {
        var userName = actionContext.RequestContext.Principal.Identity.Name;

        if (userName == null)
            return false;

        using (var context = new UserContext())
        {
            var userStore = new UserStore<ApplicationUser>(context);
            var userManager = new UserManager<ApplicationUser>(userStore);
            var user = userManager.FindByName(userName);

            if (user == null)
                return false;

            foreach (var role in RolesArray)
                if (!userManager.IsInRole(user.Id, role))
                    return false;

            return true;
        }
    }
}

public class MyApiController : ApiController
{
    [HttpGet]
    [AuthorizeEx("ViewTickets", "EditTickets")]
    public Ticket GetTicket(int id)
    {
        return blah;
    }
}

epswing fucked around with this message at 23:35 on Nov 12, 2015

    public FileContentResult Download(int fileId)
    {
        var myContent = GetContentForFile(fileId);
        var myFileMeta = GetFileMeta(fileId);

        if (myContent == null || myFileMeta == null)
            throw new FriendlyException("The file or its associated data could not be found.");

        return File(myContent.Content, myContent.MediaType, myFileMeta.FileName);
    }

    HTTP/1.1 200 OK
    Cache-Control: private, s-maxage=0
    Content-Type: image/jpeg
    Server: Microsoft-IIS/8.5
    X-AspNetMvc-Version: 5.2
    Content-Disposition: attachment; filename=1447114384146-643143584.jpg
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    Date: Thu, 12 Nov 2015 23:09:00 GMT
    Content-Length: 1682868

    HTTP/1.1 200 OK
    Cache-Control: private, s-maxage=0
    Content-Type: application/octet-stream
    Server: Microsoft-IIS/8.5
    X-AspNetMvc-Version: 5.2
    Content-Disposition: attachment; filename="1447114384146-643143584.JPG"
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    Date: Thu, 12 Nov 2015 23:42:18 GMT
    Content-Length: 1682868

putin is a cunt fucked around with this message at 02:05 on Nov 13, 2015

bool foo::dostuff(Object ^blah)
{
    msclr::auto_gcroot<BaseClass> temp = blah->GetContainer()
    msclr::auto_gcroot<DerivedClass> temp2 = safe_cast<DerivedClass>( temp )
    if (temp2.get() == nullptr)
        return false;
    this->container = std::move( temp2 );
    temp.release(); // WHY!?
}

Ika fucked around with this message at 18:20 on Nov 17, 2015

epswing fucked around with this message at 18:49 on Nov 17, 2015

DerivedClass temp2;
using (BaseClass temp = blah.GetContainer())
{
    temp2 = (DerivedClass)temp;
}
// temp is now Disposed, so temp2 can't be used for anything

raminasi fucked around with this message at 19:19 on Nov 17, 2015

Ika fucked around with this message at 20:30 on Nov 17, 2015

void foo::dostuff(Object ^blah)
{
    BaseClass ^baseContainer = nullptr;
    DerivedClass ^derivedContainer = nullptr;
    try
    {
        baseContainer = blah->GetContainer();
        derivedContainer = safe_cast<DerivedClass^>(container);
        this->container = msclr::auto_gcroot<DerivedClass^>(derivedContainer);
    }
    finally
    {
        if (baseContainer != nullptr && derivedContainer == nullptr)
        {
            delete baseContainer;
        }
    }
}

raminasi fucked around with this message at 21:47 on Nov 17, 2015

Ika fucked around with this message at 22:00 on Nov 17, 2015