问题描述
我们有一个Blazor WebAssembly-App,可与ASP.NET Core API控制器(V3.1)一起使用.与我们的Api控制器中的[Authorize]
属性配合使用的身份验证Cookie:
We have an Blazor WebAssembly-App which works with an ASP.NET Core API-Controller (V3.1). The Authentication Cookie which works well with [Authorize]
attribute in our Api-Controller:
namespace BlazorWebAssemblyApp.Server.Controllers
{
[Route("[controller]")]
[ApiController]
public class ClientsController : ControllerBase
{
private const string AuthSchemes = CookieAuthenticationDefaults.AuthenticationScheme;
[HttpGet("search")]
[Authorize(AuthenticationSchemes = AuthSchemes)]
public ActionResult<List<Shared.Client>> Search(Shared.Client.SearchProperty pProperty, string pText)
{
// [...]
}
}
}
我们正在使用返回HTTP状态代码403 Forbidden
,而不是路由到登录页面.
We are using the solution described here to return an HTTP-Status Code 403 Forbidden
instead routing to the login page.
namespace BlazorWebAssemblyApp.Server
{
public class Startup
{
// [...]
public void ConfigureServices(IServiceCollection services)
{
// [...]
services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme).AddCookie(options => {
options.Events.OnRedirectToAccessDenied = context => {
context.Response.StatusCode = 403;
return Task.CompletedTask;
};
});
}
}
}
但是解决方案不起作用.该应用仍会重定向到默认路径/Account/Login
:
But the Solution is not working. The app still redirects to default path /Account/Login
:
如何在Blazor Web Assembly应用中返回http状态代码403 Forbidden而不是重定向?
How can I return the http-status code 403 Forbidden instead redirect in Blazor Web Assembly app?
推荐答案
只需添加OnRedirectToLogin
即可
options.Events.OnRedirectToLogin = context =>
{
context.Response.StatusCode = 401; // or 403 if you want
return Task.CompletedTask;
};
这篇关于如何在Blazor Web Assembly应用中返回403 Forbidden而不是重定向?的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持!