views:

69

answers:

2

I have Forms authentication and I need a custom object to be stored in HttpContext.Current.User and in Thread.CurrentPrincipal.

To get this, I listen to PostAuthenticateRequest event, then read from the DB all the user data I need to be stored in HttpContext.Current.User and in Thread.CurrentPrincipal, then I instantiate custom IPrincipal and IIdentity objects and assign them to the above locations.

The problem is that for some reason PostAuthenticateRequest fires several times for a single request.. This causes unnecessary DB roundtrips that hurt performance..

How should I address this? (ASP.NET MVC 2)

Thanks.

+2  A: 

Are you sure that it is running several times for a single request? Remember, every resource such as images and style sheets referenced on your page will trigger this event as they are treated as seperate requests. You are best advised to briefly cache the custom objects and check for their existence in the cache and only going to the DB if not there.

You will need to implement some locking on the cache as these requests typically happen very close together.

Daniel Dyson
Oh, yeah! The thing with resources and etc slipped my mind!!! Thanks for the refresher! I've already considered caching. But it also goes with implications. For instance, I read from the DB and store in Principal user's permissions. Having them in cache is not very good idea in case Admin decides to change permission for a user - cached user's permissions won't be updated until the user logs off/log on.. Need to try your idea with "brief" caching. It looks like it should fit the bill.. Thanks a lot!
Andrey
You could update the cache for the current user on Page_Init. Then it would be reloaded from the DB only once per page request. This will always occur before any of the other resorces are requested because the page hasn't been rendered yet.
Daniel Dyson
+1  A: 

Just use the tag in your web.config to remove any authentication from your scripts, css and image directories. For example:

<system.web>
...
</system.web>

<location path="~/Scripts">
   <system.web>
      <authorization>
         <allow users="*"/>
      </authorization>
   </system.web>   
</location>
Pharcyde