Where is the source of RequireHttpsAttribute?

Question

ASP.NET MVC includes the RequireHttpsAttribute attribute to force SSL connection, however, looking at the code, the source file for it was not found anywhere. I do not look in the right place?

Answer 1

I just downloaded the source for ASP.NET MVC 3 RTM and found it in the System.Web.Mvc project:

namespace System.Web.Mvc { using System; using System.Diagnostics.CodeAnalysis; using System.Web.Mvc.Resources; [SuppressMessage("Microsoft.Performance", "CA1813:AvoidUnsealedAttributes", Justification = "Unsealed because type contains virtual extensibility points.")] [AttributeUsage(AttributeTargets.Class | AttributeTargets.Method, Inherited = true, AllowMultiple = false)] public class RequireHttpsAttribute : FilterAttribute, IAuthorizationFilter { public virtual void OnAuthorization(AuthorizationContext filterContext) { if (filterContext == null) { throw new ArgumentNullException("filterContext"); } if (!filterContext.HttpContext.Request.IsSecureConnection) { HandleNonHttpsRequest(filterContext); } } protected virtual void HandleNonHttpsRequest(AuthorizationContext filterContext) { // only redirect for GET requests, otherwise the browser might not propagate the verb and request // body correctly. if (!String.Equals(filterContext.HttpContext.Request.HttpMethod, "GET", StringComparison.OrdinalIgnoreCase)) { throw new InvalidOperationException(MvcResources.RequireHttpsAttribute_MustUseSsl); } // redirect to HTTPS version of page string url = "https://" + filterContext.HttpContext.Request.Url.Host + filterContext.HttpContext.Request.RawUrl; filterContext.Result = new RedirectResult(url); } } } 

Answer 2

Do you mean RequireSslAttribute? http://aspnet.codeplex.com/SourceControl/changeset/view/63930#391756