What is the difference between using AuthorizeAttribute or IAuthorizationFilter?
AuthorizeAttribute requires you to override the OnAuthorization method and IAuthorizationFilter requires you to implement an OnAuthorization method. Seems like the same thing to me, are there any other differences? Why would one be used over the other? EDIT: To clarify, I'm trying to understand what the difference is between the following 2 pieces of code. public class PasswordExpirationCheckAttribute : AuthorizeAttribute { private int _maxPasswordAgeInDays; public PasswordExpirationCheckAttribute(int maxPasswordAgeInDays) { _maxPasswordAgeInDays = maxPasswordAgeInDays; } public override void