Problem when disconnecting a user in ASP.NET MVC

Question

I have a problem with ASP.Net MVC regarding authentication. The user managed to login and log out with no problem but when I click the back button is in the browser on the watch still logged in !!! Can someone help me!!! I also remind you that I am not using the default authentication of Visual Studio

    [HttpPost]
    [AllowAnonymous]
    [ValidateAntiForgeryToken]
    public ActionResult Login(LoginViewModel model)
    {
        if (ModelState.IsValid)
        {
            var isValidUser = IsValidUser(model);

            if(isValidUser != null)
            {
                FormsAuthentication.SetAuthCookie(model.UserMail, true); 
                return RedirectToAction("Index", "Home");
            }
            else
            {
                ModelState.AddModelError("Eror", "Invalid login attempt");
                return View();
            }
            
        }
        else
        {
            return View(model);
        }
    }

 public User IsValidUser(LoginViewModel model)
    {
        using(var db = new DbCaimanContext())
        {
            User user = db.Users.Where(q => q.UserMail.Equals(model.UserMail) && q.Password.Equals(model.Password)).SingleOrDefault();

            if (user == null)
                return null;
            else
                return user;
        }
    }

And here is my disconnection method :

public ActionResult LogOut()
    {
        FormsAuthentication.SignOut();
        Session.Abandon();
        return RedirectToAction("Login");
    }

Please give details of your authentication method, and a code example, e.g. how you log the user out. — Tsahi Asher
– Tsahi Asher, Commented Sep 3, 2020 at 11:52
Have you tried Session.Clear(); before the Session.Abandon(); ? — Sycraw
– Sycraw, Commented Sep 3, 2020 at 12:14
Does this answer your question? How to clear browser cache when user log off in asp.net using c#? It's possible that what you see after pressing browser's back button is in local cache. You could disable cache for that page. — Daniel Manta
– Daniel Manta, Commented Sep 3, 2020 at 12:26

Wowo Ot · Accepted Answer · 2020-09-03 16:48:41Z

0

In your Login Get Method

    [AllowAnonymous]
    public ActionResult Login(string returnUrl)
    {

        ViewBag.ReturnUrl = returnUrl;
        
        if (HttpContext.User.Identity.IsAuthenticated)
            return RedirectToAction("Index", "Main");// go to anywhere you want
        else
            return View();
    }

answered Sep 3, 2020 at 16:48

Wowo Ot

1,5791 gold badge16 silver badges25 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Problem when disconnecting a user in ASP.NET MVC

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related