Caching content only for non-authenticated users

Question

For a web-site, I want to cache the pages ONLY for users who are not authenticated - authenticated users do not get cached content (since they will be updating and need to see results right away).

I know how to vary the cache for each user using VaryByCustom: Link1 Link2

...But I can't figure out how to turn off caching entirely for authenticated users.

What to do?

Edit

The code below has a problem if there is already a cached version of the page from an unauthenticated user. Basically the authenticated user will be served the unauthenticated view of things.

However, this link here has solution that works: Link

you can create your custom cache attribute that check if user is authenticated and after do some logic (cache or not cache output). — Roberto Conte Rosito, Feb 04 '11 at 12:22
Sounds good, RoBYCoNTe. You should write it up as an answer so people can vote for it. :) — Kjensen, Feb 04 '11 at 15:06

score 5 · Answer 1 · answered Feb 09 '11 at 22:42

5

Use this as a global action filter.

public class NoCacheForAuthenticatedUsersAttribute: ActionFilterAttribute
{
    public override void OnResultExecuted(ResultExecutedContext filterContext)
    {
        if(filterContext.HttpContext.User.Identity.IsAuthenticated)
        {
            filterContext.HttpContext.Response.Cache.SetCacheability(HttpCacheability.NoCache);
        }
    }
}

answered Feb 09 '11 at 22:42

smartcaveman

41,281
29
127
212

1

Doesn't seem to be working for me. Once the page in placed in the output cache, the attribute logic won't get executed. – Xavier Poinas Dec 20 '12 at 02:42
Maybe validation callback is missing httpContext.Response.Cache.AddValidationCallback – Tomas Kubes Feb 20 '15 at 09:13

Haacked · Accepted Answer · 2011-02-19T00:40:49.543

3

Use HttpCachePolicy.AddValidationCallback.

See: http://msdn.microsoft.com/en-us/library/system.web.httpcachepolicy.addvalidationcallback.aspx

edited Feb 19 '11 at 00:40

answered Feb 13 '11 at 00:56

Haacked

58,045
14
90
114

Actually, mine would create a new version for every request! So the authenticated user should never see cached content. But then again, you might have a new problem, cache pollution. Hmmm, let me follow up on this. Maybe returning null from this would work. – Haacked Feb 18 '11 at 18:55

score 2 · Answer 3 · answered Feb 06 '11 at 15:30

Taking inspiration from the Link1 you posted, as easy-to-code idea is that you could alter the output of the GetVaryByCustomString override as follows:

public override string GetVaryByCustomString(HttpContext context, string arg)
{
    if (arg == "IsLoggedIn")
    {
        if (context.Request.Cookies["anon"] != null)
        {
           if (context.Request.Cookies["anon"].Value == "false")
           {
              return "auth";
           }
        }
        return Guid.New().ToString();
    }
    else
    {
        return base.GetVaryByCustomString(context, arg);
    }
}

This is not really an answer as technically the authenticated user's output will still be cached, but it does satisfy the requirement of having authenticated users see whatever the results are right away. The downside is that you'll need to keep the cache duration/TTL small enough so your cache doesn't get flooded but large enough that anonymous users gain some benefit from it.

Another alternative is to write your own Action Filter to do the caching, and add support in there for anonymous-only caching. This is far more in 'roll your own' territory though. See Klopfenstein's old post or Steve Sanderson's on this for a starting point. They lack many of the other features of OutputCache (it keys on the whole route data for instance), but you can make it work to your own specifications.

score 0 · Answer 4 · answered Feb 04 '11 at 13:26

0

You may want to create two controllers, one for authenticated users (where you don't cache), one for non authenticated users (where you cache). Then you can refractor the logic in the controllers to a common "business layer object" to keeping your code DRY and unit testable.

answered Feb 04 '11 at 13:26

Steven Striga

1,371
2
10
17

That is a way to do it, but there must be a better way. – Kjensen Feb 06 '11 at 14:44

Caching content only for non-authenticated users

4 Answers4

Linked