Verify FormsAuthentication cookie on request using a custom attribute

ASP.NET Core inspired request authentication, using a custom attribute & FormsAuthentication in legacy ASP.NET Website Projects! Supports WebMethods, Page Classes, MasterPage Classes & WebService Classes

Setup:

Prerequisite

IIS needs to be running in integrated mode. Classic mode is not supported due to the nature of the classic IIS pipeline

Web.config

<?xml version="1.0" encoding="utf-8"?>
<configuration>
    <system.webServer>
        <!--RequireAuthentication Module-->
        <modules>
            <add name="AttributeBasedFormsAuthenticationModule" type="AttributeBasedFormsAuthenticationModule" preCondition="integratedMode" />
        </modules>
    </system.webServer>
</configuration>

Global.asax (vb¹):

<%@ Application Language="VB" %>

<script RunAt="server">
    Sub Application_Start(ByVal sender As Object, ByVal e As EventArgs)
        Me.UseAuthentication()
    End Sub
</script>

Supported Use Cases:

Decorated on spesific PageMethod's or Ajax WebMethod's:

[RequiresAuthentication]
[WebMethod]
public string AjaxMethod() {

Decorated on the main WebService Class:

Not supported with pathing as of yet. Small rewrite needed

[RequiresAuthentication]
[System.Web.Script.Services.ScriptService()]
[WebService(Namespace = "http://localhost:8080/")]
[WebServiceBinding(ConformsTo = WsiProfiles.BasicProfile1_1)]
[global::Microsoft.VisualBasic.CompilerServices.DesignerGenerated()]
public class AspAjaxWebService : System.Web.Services.WebService

Decorated on a Page Class:

[RequiresAuthentication]
public partial class WebFormsPage : System.Web.UI.Page

Decorated on a MasterPage Class:

[RequiresAuthentication]
public partial class WebFormsMasterPage : System.Web.UI.MasterPage

Footnotes

1. this.UseAuthentication in C# ↩