AccessDeniedのルーティングに問題があります。おそらくログイン/ログアウトパスも同様です。このプロジェクトは、魔法がなくなったデフォルトのプロジェクトです。 AccessDenied()
メソッドを持つAccount
コントローラーが存在します。
私が今試しているのは(これはインターネットの商品によって提供されるソリューションです)
services.Configure<CookieAuthenticationOptions>(options =>
{
options.LoginPath = new PathString("/");
options.AccessDeniedPath = new PathString("/InactiveSponsor");
options.LogoutPath = new PathString("/");
});
しかし、それはまったく違いはありません。だから何かアイデアはありますか?なぜそれが機能しないのか、そしてそれをどのように機能させるのかについてのアイデア。
これが私のStartup.csです
public Startup(IHostingEnvironment env)
{
var builder = new ConfigurationBuilder()
.SetBasePath(env.ContentRootPath)
.AddJsonFile("appsettings.json", optional: true, reloadOnChange: true)
.AddJsonFile($"appsettings.{env.EnvironmentName}.json", optional: true)
.AddEnvironmentVariables();
if (env.IsDevelopment())
{
// This will Push telemetry data through Application Insights pipeline faster, allowing you to view results immediately.
builder.AddApplicationInsightsSettings(developerMode: true);
}
Configuration = builder.Build();
}
public IConfigurationRoot Configuration { get; }
// This method gets called by the runtime. Use this method to add services to the container.
public void ConfigureServices(IServiceCollection services)
{
// Add framework services.
services.AddApplicationInsightsTelemetry(Configuration);
string connection = "DefaultConnection";
//services.AddDbContext<SponsorContext>(options => options.UseSqlServer(connection));
services.AddDbContext<SponsorContext>(options => options.UseSqlServer(Configuration[$"Data:{connection}"]));
services.AddIdentity<ApplicationUser, ApplicationRole>()
.AddEntityFrameworkStores<SponsorContext>()
.AddDefaultTokenProviders();
services.AddMvc();
services.AddAuthorization(options =>
{
options.AddPolicy(Policies.RequireAdmin, policy => policy.RequireRole(Roles.Administrator));
options.AddPolicy(Policies.IsSponsor, policy => policy.RequireRole(Roles.Sponsor));
options.AddPolicy(Policies.IsSponsorOrAdmin, policy => policy.RequireRole(Roles.Administrator, Roles.Sponsor));
});
/*
* AddTransient Different on each instance/use
* AddScoped Different instance on a per request basis
* AddSingleton Always the same instance
*/
//DI
services.AddScoped<ManageUserRepository>();
services.AddScoped<ISponsorManagement, SponsorRepository>();
services.AddScoped<ISponsorRead, SponsorRepository>();
}
// This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
public void Configure(IApplicationBuilder app, IHostingEnvironment env, ILoggerFactory loggerFactory)
{
loggerFactory.AddConsole(Configuration.GetSection("Logging"));
loggerFactory.AddDebug();
app.UseApplicationInsightsRequestTelemetry();
if (env.IsDevelopment())
{
app.UseDeveloperExceptionPage();
app.UseBrowserLink();
}
else
{
app.UseExceptionHandler("/Home/Error");
}
app.UseApplicationInsightsExceptionTelemetry();
app.UseStaticFiles();
app.UseIdentity();
app.UseMvc(routes =>
{
routes.MapRoute(
name: "default",
template: "{controller=Home}/{action=Index}/{id?}");
});
}
試してみてください
services.AddIdentity<ApplicationUser, IdentityRole>(op=>op.Cookies.ApplicationCookie.AccessDeniedPath = new PathString("/InactiveSponsor"))
.AddEntityFrameworkStores<SponsorContext>()
.AddDefaultTokenProviders();
または
services.Configure<IdentityOptions>(opt =>
{
opt.Cookies.ApplicationCookie.LoginPath = new PathString("/aa");
opt.Cookies.ApplicationCookie.AccessDeniedPath = new PathString("/InactiveSponsor");
opt.Cookies.ApplicationCookie.LogoutPath = new PathString("/");
});
ASP.NET Core 2.x Webアプリでの同様の問題について、認証がAzure AD/OpenID Connectで行われている場合は、この方法でルートを変更できます。
services.AddAuthentication(options =>...)
.AddOpenIdConnect(options =>...)
.AddCookie(options =>
{
options.AccessDeniedPath = "/path/unauthorized";
options.LoginPath = "/path/login";
});
ASP.NET Core 2で同様の問題が発生した場合は、次のようにservices.Configure<CookieAuthenticationOptions>(...)
をservices.ConfigureApplicationCookie()
に置き換えることができます。
Startup.csでこれを置き換えます。
services.Configure<CookieAuthenticationOptions>(options =>
{
options.LoginPath = new PathString("/[your-path]");
options.AccessDeniedPath = new PathString("/[your-path]");
options.LogoutPath = new PathString("/[your-path]");
});
これとともに:
services.ConfigureApplicationCookie(options =>
{
options.LoginPath = new PathString("/[your-path]");
options.AccessDeniedPath = new PathString("/[your-path]");
options.LogoutPath = new PathString("/[your-path]");
}