Application_Error not firing when customerrors = "On"
I found an article which describes a much cleaner way of making custom error pages in an MVC3 web app which does not prevent the ability to log the exceptions.
The solution is to use the <httpErrors>
element of the <system.webServer>
section.
I configured my Web.config like so...
<httpErrors errorMode="DetailedLocalOnly" existingResponse="Replace">
<remove statusCode="404" subStatusCode="-1" />
<remove statusCode="500" subStatusCode="-1" />
<error statusCode="404" path="/Error/NotFound" responseMode="ExecuteURL" />
<error statusCode="500" path="/Error" responseMode="ExecuteURL" />
</httpErrors>
I also configured customErrors
to have mode="Off"
(as suggested by the article).
That makes the responses overriden by an ErrorController's actions. Here is that controller:
public class ErrorController : Controller
{
public ActionResult Index()
{
return View();
}
public ActionResult NotFound()
{
return View();
}
}
The views are very straightforward, I just used standard Razor syntax to create the pages.
That alone should be enough for you to use custom error pages with MVC.
I also needed logging of Exceptions so I stole the Mark's solution of using a custom ExceptionFilter...
public class ExceptionPublisherExceptionFilter : IExceptionFilter
{
public void OnException(ExceptionContext exceptionContext)
{
var exception = exceptionContext.Exception;
var request = exceptionContext.HttpContext.Request;
// log stuff
}
}
The last thing you need to so is register the Exception Filter in your Global.asax.cs file:
public static void RegisterGlobalFilters(GlobalFilterCollection filters)
{
filters.Add(new ExceptionPublisherExceptionFilter());
filters.Add(new HandleErrorAttribute());
}
This feels like a much cleaner solution than my previous answer and works just as well as far as I can tell. I like it especially because it didn't feel like I was fighting against the MVC framework; this solution actually leverages it!
I solved this by creating an ExceptionFilter and logging the error there instead of Application_Error. All you need to do is add a call to in in RegisterGlobalFilters
log4netExceptionFilter.cs
using System
using System.Web.Mvc;
public class log4netExceptionFilter : IExceptionFilter
{
public void OnException(ExceptionContext context)
{
Exception ex = context.Exception;
if (!(ex is HttpException)) //ignore "file not found"
{
//Log error here
}
}
}
Global.asax.cs
public static void RegisterGlobalFilters(GlobalFilterCollection filters)
{
filters.Add(new log4netExceptionFilter()); //must be before HandleErrorAttribute
filters.Add(new HandleErrorAttribute());
}
UPDATE
Since this answer does provide a solution, I will not edit it, but I have found a much cleaner way of solving this problem. See my other answer for details...
Original Answer:
I figured out why the Application_Error()
method is not being invoked...
Global.asax.cs
public class MvcApplication : System.Web.HttpApplication
{
public static void RegisterGlobalFilters(GlobalFilterCollection filters)
{
filters.Add(new HandleErrorAttribute()); // this line is the culprit
}
...
}
By default (when a new project is generated), an MVC application has some logic in the Global.asax.cs
file. This logic is used for mapping routes and registering filters. By default, it only registers one filter: a HandleErrorAttribute
filter. When customErrors are on (or through remote requests when it is set to RemoteOnly), the HandleErrorAttribute tells MVC to look for an Error view and it never calls the Application_Error()
method. I couldn't find documentation of this but it is explained in this answer on programmers.stackexchange.com.
To get the ApplicationError() method called for every unhandled exception, simple remove the line which registers the HandleErrorAttribute filter.
Now the problem is: How to configure the customErrors to get what you want...
The customErrors section defaults to redirectMode="ResponseRedirect"
. You can specify the defaultRedirect attribute to be a MVC route too. I created an ErrorController which was very simple and changed my web.config to look like this...
web.config
<customErrors mode="RemoteOnly" redirectMode="ResponseRedirect" defaultRedirect="~/Error">
<error statusCode="404" redirect="~/Error/PageNotFound" />
</customErrors>
The problem with this solution is that it does a 302 redirect to your error URLs and then those pages respond with a 200 status code. This leads to Google indexing the error pages which is bad. It also isn't very conformant to the HTTP spec. What I wanted to do was not redirect, and overrite the original response with my custom error views.
I tried to change redirectMode="ResponseRewrite"
. Unfortunately, this option does not support MVC routes, only static HTML pages or ASPX. I tried to use an static HTML page at first but the response code was still 200 but, at least it didn't redirect. I then got an idea from this answer...
I decided to give up on MVC for error handling. I created an Error.aspx
and a PageNotFound.aspx
. These pages were very simple but they had one piece of magic...
<script type="text/C#" runat="server">
protected override void OnLoad(EventArgs e)
{
base.OnLoad(e);
Response.StatusCode = (int) System.Net.HttpStatusCode.InternalServerError;
}
</script>
This block tells the page to be served with the correct status code. Of course, on the PageNotFound.aspx page, I used HttpStatusCode.NotFound
instead. I changed my web.config to look like this...
<customErrors mode="RemoteOnly" redirectMode="ResponseRewrite" defaultRedirect="~/Error.aspx">
<error statusCode="404" redirect="~/PageNotFound.aspx" />
</customErrors>
It all worked perfectly!
Summary:
- Remove the line:
filters.Add(new HandleErrorAttribute());
- Use
Application_Error()
method to log exceptions - Use customErrors with a ResponseRewrite, pointing at ASPX pages
- Make the ASPX pages responsible for their own response status codes
There are a couple downsides I have noticed with this solution.
- The ASPX pages can't share any markup with Razor templates, I had to rewrite our website's standard header and footer markup for a consistent look and feel.
- The *.aspx pages can be accessed directly by hitting their URLs
There are work-arounds for these problems but I wasn't concerned enough by them to do any extra work.
I hope this helps everyone!