What is OnActionExecuting defined for in ASP.NET-MVC's AccountController?

Question

The project template for ASP.NET-MVC includes an AccountController that contains the following piece of code

protected override void OnActionExecuting(ActionExecutingContext filterContext) {
    if (filterContext.HttpContext.User.Identity is WindowsIdentity) {
        throw new InvalidOperationException("Windows authentication is not supported.");
    }
}

What is it for?

Answer 1

For information on the method, see the MSDN reference.

The override you are referring to is throwing an exception if the website has been set up to use Windows authentication, in effect preventing this being used as a method of authentication.

Answer 2

The template is set up for FormsAuthentication. This ensures that a WindowsIdentity cannot successfully authenticate.