82

Here's the setup. Say I have some action filter that needs an instance of a service:

public interface IMyService
{
   void DoSomething();
}

public class MyService : IMyService
{
   public void DoSomething(){}
}

I then have an ActionFilter that needs an instance of that service:

public class MyActionFilter : ActionFilterAttribute
{
   private IMyService _myService; // <--- How do we get this injected

   public override void OnActionExecuting(ActionExecutingContext filterContext)
   {
       _myService.DoSomething();
       base.OnActionExecuting(filterContext);
   }
}

In MVC 1/2 injecting dependencies into action filters was a bit of a pain in the ass. The most common approach was to use a custom action invoker as can be seen here: http://www.jeremyskinner.co.uk/2008/11/08/dependency-injection-with-aspnet-mvc-action-filters/ The main motivation behind this workaround was because this following approach was considered sloppy and tight coupling with the container:

public class MyActionFilter : ActionFilterAttribute
{
   private IMyService _myService;

   public MyActionFilter()
      :this(MyStaticKernel.Get<IMyService>()) //using Ninject, but would apply to any container
   {

   }

   public MyActionFilter(IMyService myService)
   {
      _myService = myService;
   }

   public override void OnActionExecuting(ActionExecutingContext filterContext)
   {
       _myService.DoSomething();
       base.OnActionExecuting(filterContext);
   }
}

Here we're using constructor injection and overloading the constructor to use the container and inject the service. I do agree that does tightly couple the container with the ActionFilter.

My question though is this: Now in ASP.NET MVC 3, where we have an abstraction of the container being used (through the DependencyResolver) are all these hoops still necessary? Allow me to demonstrate:

public class MyActionFilter : ActionFilterAttribute
{
   private IMyService _myService;

   public MyActionFilter()
      :this(DependencyResolver.Current.GetService(typeof(IMyService)) as IMyService)
   {

   }

   public MyActionFilter(IMyService myService)
   {
      _myService = myService;
   }

   public override void OnActionExecuting(ActionExecutingContext filterContext)
   {
       _myService.DoSomething();
       base.OnActionExecuting(filterContext);
   }
}

Now I know that some purists might scoff at this, but seriously, what would be the downside? It's still testable as you can use the constructor that takes an IMyService at test time and inject a mock service that way. You're not tied down to any implementation of DI container since you're using the DependencyResolver, so are there any downsides to this approach?

Incidentally, here's another nice approach for doing this in MVC3 using the new IFilterProvider interface: http://www.thecodinghumanist.com/blog/archives/2011/1/27/structuremap-action-filters-and-dependency-injection-in-asp-net-mvc-3

4
  • Thanks for linking to my post :). I think this would be fine. Despite my blog posts from earlier this year, I'm not actually a big fan of the DI they included in MVC 3 and have't been using it lately. It seems to work but kinda feels awkward at times.
    – Mallioch
    Aug 25, 2011 at 15:20
  • If you're using Ninject, this could be a possible approach: stackoverflow.com/questions/6193414/… Aug 25, 2011 at 17:43
  • +1, although the service locator is considered an anti-pattern by many, I think I prefer your approach over Marks for its simplicity and also the fact that the dependency is resolved in one place, the IOC container, whereas in Mark's example you would have to resolve in two places, in the bootstrapper and when registering the global filters, which feels wrong.
    – magritte
    Oct 7, 2011 at 14:26
  • you can still use the "DependencyResolver.Current.GetService(Type) anytime you want to.
    – Mert Susur
    Sep 19, 2014 at 11:55

3 Answers 3

98

Yes, there are downsides, as there are lots of issues with IDependencyResolver itself, and to those you can add the use of a Singleton Service Locator, as well as Bastard Injection.

A better option is to implement the filter as a normal class into which you can inject whichever services you'd like:

public class MyActionFilter : IActionFilter
{
    private readonly IMyService myService;

    public MyActionFilter(IMyService myService)
    {
        this.myService = myService;
    }

    public void OnActionExecuting(ActionExecutingContext filterContext)
    {
        if(this.ApplyBehavior(filterContext))
            this.myService.DoSomething();
    }

    public void OnActionExecuted(ActionExecutedContext filterContext)
    {
        if(this.ApplyBehavior(filterContext))
            this.myService.DoSomething();
    }

    private bool ApplyBehavior(ActionExecutingContext filterContext)
    {
        // Look for a marker attribute in the filterContext or use some other rule
        // to determine whether or not to apply the behavior.
    }

    private bool ApplyBehavior(ActionExecutedContext filterContext)
    {
        // Same as above
    }
}

Notice how the filter examines the filterContext to determine whether or not the behavior should be applied.

This means that you can still use attributes to control whether or not the filter should be applied:

public class MyActionFilterAttribute : Attribute { }

However, now that attribute is completely inert.

The filter can be composed with the required dependency and added to the global filters in global.asax:

GlobalFilters.Filters.Add(new MyActionFilter(new MyService()));

For a more detailed example of this technique, although applied to ASP.NET Web API instead of MVC, see this article: http://blog.ploeh.dk/2014/06/13/passive-attributes

15
  • 23
    You asked about what the downsides would be: the downsides are decreased maintainability of your code base, but that hardly feels concrete. This is something that creeps up on you. I can't say that if you do what you propose to do, you will have a race condition, or the CPU may overheat, or kittens will die. That's not going to happen, but if you don't follow proper design patterns and avoid anti-patterns, your code will rot and four years from now you'll want to rewrite the application from scratch (but your stakeholders won't let you). Aug 25, 2011 at 19:02
  • 5
    +1 for showing how to separate the action filter code from the attribute code. I'd prefer this method solely for the sake of separation of concerns. I do appreciate the OP's frustration with the vagueness on the "what's wrong with this" part of the question though. It's easy to call something an anti-pattern, but when his specific code addresses most of the arguments against the anti-pattern (unit-testability, binding via configuration, etc.), it would be nice to know why this pattern makes code rot faster than "purer" code might. Not that I'm disagreeing with you. I enjoyed your book, BTW. Aug 25, 2011 at 22:23
  • 5
    @BFree: By the way, Remo Gloor has done some fantastic stuff with the MVC3 extension for Ninject. github.com/ninject/ninject.web.mvc/wiki/… describes how you can use Ninject bindings to define an action filter that gets applied to controllers or actions with a specific attribute on them, rather than having to register the filters globally. This transfers even more control into your Ninject bindings, which is the whole point of IoC. Aug 25, 2011 at 22:29
  • 1
    How to implement the methods - sketch: the ActionDescriptor which is part of the filterContext implements ICustomAttributeProvider, so you can pull the marker attribute from there. Aug 26, 2011 at 4:59
  • 1
    @Mark: four years from now you'll want to rewrite the application from scratch (but your stakeholders won't let you) - or they will let him and the product dies because the TTM is too long. Aug 26, 2011 at 7:36
32

I'm not positive, but I believe you can just use an empty constructor (for the attribute part) and then have a constructor that actually injects the value (for the filter part).*

Edit: After a little reading up, it appears that the accepted way to do this is via property injection:

public class MyActionFilter : ActionFilterAttribute
{
    [Injected]
    public IMyService MyService {get;set;}
    
    public override void OnActionExecuting(ActionExecutingContext filterContext)
    {
        MyService.DoSomething();
        base.OnActionExecuting(filterContext);
    }
}

Regarding the why not use a Service Locator question: It mostly just reduces the flexibility of your dependency injection. For example, what if you were injecting a logging service, and you wanted to automatically give the logging service the name of the class it's being injected into? If you use constructor injection, that would work great. If you're using a Dependency Resolver/Service Locator, you'd be out of luck.

Update

Since this got accepted as the answer, I'd like to go on the record to say that I prefer Mark Seeman's approach because it separates the Action Filter responsibility away from the Attribute. Furthermore, Ninject's MVC3 extension has some very powerful ways to configure action filters via bindings. See the following references for more details:

Update 2

As @usr pointed out in the comments below, ActionFilterAttributes are instantiated when the class is loaded, and they last the entire lifetime of the application. If the IMyService interface is not supposed to be a Singleton, then it ends up being a Captive Dependency. If its implementation isn't thread-safe, you could be in for a lot of pain.

Whenever you have a dependency with a shorter lifespan than your class's expected lifespan, it's wise to inject a factory to produce that dependency on-demand, rather than injecting it directly.

11
  • Re your comment about the lack of flexibility: Behind the DependencyResolver is an actual IOC container driving it, so you can add any custom logic you want right in there when building up an object. Not sure I follow your point.....
    – BFree
    Aug 25, 2011 at 15:13
  • @BFree: When calling DependencyResolver.GetService, the binding method has no idea what class this dependency is being injected into. What if you wanted to create a different IMyService for certain types of action filters? Or, as I said in my answer, what if you wanted to provide a special argument to the MyService implementation to tell it what class it's been injected into (which is useful for loggers)? Aug 25, 2011 at 15:19
  • OK, I did some messing around, and you're 100% right, there's no way to get the "context" of which the current resolution is happening, so yes that's a downside. Good point. I would argue though, that adding an Inject attribute is ugly as well though, as that ties your service to an implementation of a particular container as well, where as my DependencyResolver approach does not. I'll leave this question open for a bit, I'm just curious to hear more opinions. Thanks!
    – BFree
    Aug 25, 2011 at 15:36
  • 3
    Action filters are shared across requests in MVC 3. This is highly thread-unsafe.
    – usr
    Oct 2, 2014 at 17:56
  • 3
    OK, I have removed the downvote. It was not appropriate. I'll delete these comments eventually. The MVC3 change to make filters singletons is, in my mind, without positive value and very dangerous. My intention was to save others some trouble when they find out about that in production.
    – usr
    Oct 3, 2014 at 7:50
8

The solution Mark Seemann suggested seems elegant. However pretty complex for a simple problem. Using the framework by implementing AuthorizeAttribute feels more natural.

My solution was to create a AuthorizeAttribute with a static delegate factory to a service registered in global.asax. It works for any DI container and feels slightly better than a Service Locator.

In global.asax:

MyAuthorizeAttribute.AuthorizeServiceFactory = () => Container.Resolve<IAuthorizeService>();

My custom attribute class:

[AttributeUsage(AttributeTargets.Method | AttributeTargets.Class)]
public class MyAuthorizeAttribute : AuthorizeAttribute
{
    public static Func<IAuthorizeService> AuthorizeServiceFactory { get; set; } 

    protected override bool AuthorizeCore(HttpContextBase httpContext)
    {
        return AuthorizeServiceFactory().AuthorizeCore(httpContext);
    }
}
1
  • I like this code because you don't high couple the Service Locator with MyAuthorizeAttribute. May 17, 2016 at 15:22

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.