Handle asp.net MVC session expiration

Here is a really simple way to handle a session expiration in asp.net MVC using a base controller.  Having all controller inherit from a basecontoller and overriding the OnActionExecuting event allows for checking the session before all actions are executed.

Here is the code

public class BaseController : Controller

{

    protected override void OnActionExecuting

        (ActionExecutingContext filterContext)

    {

        // If session exists

        if (filterContext.HttpContext.Session != null)

        {

            //if new session

            if (filterContext.HttpContext.Session.IsNewSession)

            {

                string cookie =

                    filterContext.HttpContext.Request.Headers["Cookie"];

                //if cookie exists and sessionid index is greater than zero

                if ((cookie !=null) &&

                    (cookie.IndexOf("ASP.NET_SessionId") >= 0))

                {

                    //redirect to desired session 

                    //expiration action and controller

                    filterContext.Result =

                        RedirectToAction("SessionExpired", "Home");

                    return;

                }

            }

        }

        //otherwise continue with action

        base.OnActionExecuting(filterContext);

    }

}

}

This simple but effective method ensures that no actions will be executed if the session has expired forcing the user to login again

-Craig