FubuMVC Authentication

AlternateConvention.cs

graph
    .Actions()
    .Where(c => c.HasInput && c.InputType().Name.StartsWith("Add") || c.InputType().Name.StartsWith("Edit"))
    .Each(c => c.WrapWith<AuthenticationRequiredBehavior>());

AuthenticationConvention.cs

public class AuthenticationConvention : IConfigurationAction
{
    public void Configure(BehaviorGraph graph)
    {
        graph
            .Actions()
            .Where(c => c.HasAttribute<SecuredAttribute>())
            .Each(c => c.WrapWith<AuthenticationRequiredBehavior>());
    }
}

AuthenticationRequiredBehavior.cs

public class AuthenticationRequiredBehavior : BasicBehavior
{
    private readonly ISecurityContext _securityContext;
    private readonly IUrlRegistry _urlRegistry;
    private readonly IOutputWriter _outputWriter;

    public AuthenticationRequiredBehavior(ISecurityContext securityContext, IUrlRegistry urlRegistry, IOutputWriter outputWriter)
        : base(PartialBehavior.Ignored)
    {
        _securityContext = securityContext;
        _urlRegistry = urlRegistry;
        _outputWriter = outputWriter;
    }

    protected override DoNext performInvoke()
    {
        if(_securityContext.IsAuthenticated())
        {
            return DoNext.Continue;
        }

        var url = _urlRegistry.UrlFor(new LoginRequestModel());
        _outputWriter.RedirectToUrl(url);
        return DoNext.Stop;
    }
}

DashboardEndpoint.cs

public class DashboardEndpoint
{
    [Secured]
    public DashboardRequestModel Get(DashboardRequestModel input)
    {
        return new DashboardRequestModel();
    }
}

FubuRegistry.cs

ApplyConvention<AuthenticationConvention>();

SecuredAttribute.cs

public class SecuredAttribute : Attribute
{
}

Web.config

<system.web>
  <authentication mode="Forms">
    <forms loginUrl="~/login" timeout="25" slidingExpiration="true" />
  </authentication>
</system.web>