Authorize attributes not working in MVC 4

问题

In my application i am using

 System.Web.Providers.DefaultMembershipProvider, System.Web.Providers, Version=2.0.0.0

as my membership provider and here my Account Controller code

[HttpPost]
        public ActionResult Login(string username,string password)
        {
            var result = Membership.ValidateUser(username, password);
            if(result)
            {

                var user = Membership.GetUser(username);
                var roles = Roles.GetRolesForUser(username);
                var isDistributor = roles.Any(x => x.ToUpper() == "DISTRIBUTOR");
                if (isDistributor) return RedirectToAction("ShowCurrentDistributor", "Distributor");
            }
            else
            {
                TempData["error"] = "Invalid login attempt";
            }
            return View();
        }

And my ShowCurrentDistributor action code:

 [HttpGet]
        [Authorize(Roles = "Distributor")]
        public ActionResult ShowCurrentDistributor()
        {

            var distributor = _distributer.GetDistributerbyEmail(User.Identity.Name);
            return View(distributor);
        }

But when i call ShowCurrentDistributor method, authorization not working. it always return back to my login form even i passed authentication with valid role( Distributor). Whats wrong with my code

回答1:

You need to add the following line after successful validation:

FormsAuthentication.SetAuthCookie(username,true);

(answered in question comments by the original poster)

来源：https://stackoverflow.com/questions/21214003/authorize-attributes-not-working-in-mvc-4