Exit https is checking for the RetainHttpsAttribute so it is provided here as well.
RetainHttpsAttribute
using System; using System.Collections.Generic; using System.Linq; using System.Text; namespace Project.MvcBase.Filters { [AttributeUsage(AttributeTargets.Class | AttributeTargets.Method)] public class RetainHttpsAttribute : Attribute { } }
ExitHttpsAttribute
using System; using System.Collections.Generic; using System.Linq; using System.Text; using System.Web.Mvc; namespace Project.MvcBase.Filters { public class ExitHttpsAttribute : FilterAttribute, IAuthorizationFilter { public void OnAuthorization(AuthorizationContext filterContext) { // abort if it's not a secure connection if (!filterContext.HttpContext.Request.IsSecureConnection) return; // abort if a [RequireHttps] attribute is applied to controller or action if (filterContext.ActionDescriptor.ControllerDescriptor.GetCustomAttributes(typeof(RequireHttpsAttribute), true).Length > 0) return; if (filterContext.ActionDescriptor.GetCustomAttributes(typeof(RequireHttpsAttribute), true).Length > 0) return; // abort if a [RetainHttps] attribute is applied to controller or action if (filterContext.ActionDescriptor.ControllerDescriptor.GetCustomAttributes(typeof(RetainHttpsAttribute), true).Length > 0) return; if (filterContext.ActionDescriptor.GetCustomAttributes(typeof(RetainHttpsAttribute), true).Length > 0) return; // abort if it's not a GET request - we don't want to be redirecting on a form post if (!String.Equals(filterContext.HttpContext.Request.HttpMethod, "GET", StringComparison.OrdinalIgnoreCase)) return; // redirect to HTTP string url = "http://" + filterContext.HttpContext.Request.Url.Host + filterContext.HttpContext.Request.RawUrl; filterContext.Result = new RedirectResult(url); } } }