如何在 ASP.NET Core 5 Blazor 服务器模式下要求身份验证并重定向到登录

Question

如何配置 BlazorHub 端点以要求经过身份验证的用户在未经过身份验证的情况下自动重定向登录？

我已尝试配置默认授权策略并在 BlazorHub 端点构建器上调用 RequireAuthenticated，但是当我运行 Blazor 应用程序时，我仍然没有被重定向到登录页面。

public class Startup
{
    public void ConfigureServices(IServiceCollection services)
    {
        services.AddRazorPages();
        services.AddServerSideBlazor();

        services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
            .AddCookie(); // added by me
        services.AddAuthorization(options =>
        {
            options.DefaultPolicy = new AuthorizationPolicyBuilder()
                .RequireAuthenticatedUser()
                .Build();
        }); // added by me
    }

    // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
    public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
    {
        if (env.IsDevelopment())
        {
            app.UseDeveloperExceptionPage();
        }
        else
        {
            app.UseExceptionHandler("/Error");
            // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
            app.UseHsts();
        }

        app.UseHttpsRedirection();
        app.UseStaticFiles();

        app.UseRouting();

        app.UseAuthentication(); // added by me
        app.UseAuthorization();  // added by me

        app.UseEndpoints(endpoints =>
        {
            endpoints.MapControllers();
            endpoints.MapBlazorHub()
                .RequireAuthorization(); // added by me
            endpoints.MapFallbackToPage("/_Host");
        });
    }
}

Answer 1

我是这样做的

services.AddRazorPages()
        .AddRazorPagesOptions(options
        => options.Conventions
        .AuthorizeFolder("/")
        );

Answer 2

_host.cshtml 是常规的 Razor 页面，而不是 Blazor 组件。因此，Razor Pages 必须需要身份验证：

public void ConfigureServices(IServiceCollection services)
{
    services.AddRazorPages();
    services.AddServerSideBlazor();
    services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
        .AddCookie(options =>
        {
            options.LoginPath = "/Auth/Login";
            options.LogoutPath = "/Auth/Logout";
        });
}

// This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
{
    app.UseEndpoints(endpoints =>
    {
        endpoints.MapRazorPages().RequireAuthorization(); // required
        endpoints.MapBlazorHub().RequireAuthorization(); 
        endpoints.MapFallbackToPage("/_Host");
    });
}

与@MisterMagoo的回答类似

如何在 ASP.NET Core 5 Blazor 服务器模式下要求身份验证并重定向到登录

How to require authentication in ASP.NET Core 5 Blazor Server Mode with redirect to login

c#

authentication

blazor

blazor-server-side

asp.net-core-5.0