How to get Request Querystring values?

Question

My api client code sends an authentication token in the querystring like:

www.example.com/api/user/get/123?auth_token=ABC123

I'm using Mvc Web api controller, and I have a filter that checks if the auth_token is valid or not, but I'm not sure how to access the request querystring values.

This is what I am doing now but it is obviously wrong:

The below snippet is inside of my filter that inherits from:

ActionFilterAttribute

public override void OnActionExecuting(System.Web.Http.Controllers.HttpActionContext actionContext)
{
       base.OnActionExecuting(actionContext);

       if (actionContext.Request.Properties.ContainsKey("auth_token") &&
          actionContext.Request.Properties["auth_token"].ToString() == "ABC123")
       {
         ...
       }
}

@muski but I want to do this in a filter, not at the action level. — loyalflow
– loyalflow, Commented Sep 24, 2013 at 14:16

Sipke Schoorstra · Accepted Answer · 2018-07-06 17:22:09Z

31

Use the GetQueryNameValuePairs extension method, like so:

var queryString = actionContext.Request.GetQueryNameValuePairs().ToDictionary(x => x.Key, x => x.Value);

EDIT To avoid duplicate keys, consider doing a ToLookup:

var queryString = actionContext.Request.GetQueryNameValuePairs().ToLookup(x => x.Key, x => x.Value);

Here's a blog post on Lookups: https://www.c-sharpcorner.com/UploadFile/vendettamit/using-lookup-for-duplicate-key-value-pairs-dictionary/

edited Jul 6, 2018 at 17:22

answered Sep 26, 2013 at 1:14

Sipke Schoorstra

3,4591 gold badge24 silver badges32 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

AgentFire Over a year ago

Butt beware: ToDictionary will throw an exception when two parameters with the same key are passed - for instance - defining an array.

Sipke Schoorstra Over a year ago

You're right. Better would be to project the name/value pairs using ToLookup.

Nate Anderson Over a year ago

I like this GetQueryNameValuePairs(); here's another approach, using LastOrDefault(...) stackoverflow.com/a/22432384/1175496

Badrinarayanan Lakshmiraghavan · Accepted Answer · 2013-09-24 16:51:13Z

10

In the OnActionExecuting method of a filter, you can access the query string and parse it like this to get the token.

var queryString = actionContext.Request.RequestUri.Query;
if(!String.IsNullOrWhiteSpace(queryString))
{
    string token = HttpUtility.ParseQueryString(
                         queryString.Substring(1))["auth_token"];
}

But then, is passing a token in query string a good practice? Probably not, but it is up to you. HTTP header could be a better option since query string can get logged and cached.

answered Sep 24, 2013 at 16:51

Badrinarayanan Lakshmiraghavan

19.3k6 gold badges65 silver badges63 bronze badges

Comments

sscheider · Accepted Answer · 2020-06-17 19:25:30Z

0

Another way to do it, similar to Badri's:

string qsValue = string.Empty;
if (Request.QueryString.HasValue)
{
   NameValueCollection queryStringNameValues = HttpUtility.ParseQueryString(Request.QueryString.Value);
   qsValue = queryStringNameValues.Get("auth_token");
}

answered Jun 17, 2020 at 19:25

sscheider

5425 silver badges14 bronze badges

Collectives™ on Stack Overflow

How to get Request Querystring values?

3 Answers 3

3 Comments

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

3 Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related