Blazor.Auth
Blazor.Auth copied to clipboard
Does Blazor.Auth override the default .net policies for JwtBearer?
In my Blazor app, I use OData, so I added a new controller:
[Authorize(AuthenticationSchemes = JwtBearerDefaults.AuthenticationScheme)]
[ApiController]
public class MyController
: ODataController
{
...
}
In program.cs, I correctly added:
services.AddAuthentication(...)
.AddJwtBearer(...)
The token settings are the same as those in BuildJwt used in Blazor.Auth and:
jwtBearerOptions.Events.OnMessageReceived = context =>
{
if (context.Request.Cookies.ContainsKey("AccessToken"))
{
context.Token = context.Request.Cookies["AccessToken"];
}
return Task.CompletedTask;
};
Then in program.cs in order:
app.UseAuthentication();
app.UseAuthorization();
...
app.MapControllers();
app.Run();
But despite the [Authorize] attribute, the endpoints in the controller execute for a unlogged user: User.Identity.IsAuthenticated == false.
@drakoo320 Do you still have issues?