C# .NET: Logon Authorization Enforcer when no AllowAnonymousAttribute is defined.

LogonAuthorize.cs

// --------------------------------------------------------------------------------------------------------------------
// <copyright file="LogonAuthorize.cs" company="">
//   Nero Sule
// </copyright>
// <summary>
//   Class to enforce authorization on everything that isn't declared with AllowAnonymous Attribute.
// </summary>
// --------------------------------------------------------------------------------------------------------------------

namespace Web.Filters
{
    using System.Web.Mvc;

    /// <summary>
    /// The logon authorization class.
    /// </summary>
    public class LogonAuthorize : AuthorizeAttribute
    {
        #region Public Methods

        /// <summary>
        /// Override authorization to only not require authorization on AllowAnonymous attributed methods
        /// </summary>
        /// <param name="filterContext">
        /// </param>
        public override void OnAuthorization(AuthorizationContext filterContext)
        {
            bool skipAuthorization = filterContext.ActionDescriptor.IsDefined(typeof(AllowAnonymousAttribute), true) ||
                                     filterContext.ActionDescriptor.ControllerDescriptor.IsDefined(
                                         typeof(AllowAnonymousAttribute), true);
            if (!skipAuthorization)
            {
                base.OnAuthorization(filterContext);
            }
        }

        #endregion
    }
}