ASP.NET Core MVC 6中的AuthorizeAttribute重定向

Question

What does a function level [Authorize] attribute do when an unauthorized user attempts to access the function? Does the attribute attempt a log-in page redirect? Is that information found somewhere? My VS2015 project gets lost in space when the [Authorize] attribute is added.

Answer 1

Make sure that you click on some kind of authentication when creating your Core project. I'm guess that you have a "No Authentication" template and put on Authorize attributes on it.

The white page you're seeing is probably due to the application correctly identifying that you are not logged in / authorized, but doesn't have anything else configured as to what happens next.

What does a function level [Authorize] attribute do when an unauthorized user attempts to access the function?

In .Net Core, it will validate a user based off of the policies that it has been given. It will return a failure if they do not meet them.

Does the attribute attempt a log-in page redirect?

The Authorize attribute itself doesn't decide what happens when an unauthorized user attempts to access a method.

Answer 2

Does the attribute attempt a log-in page redirect?

Assuming of course, that we speak about login via Individual User Accounts (read @WillRay comments below):

If unauthenticated user try access to page/action decorated witch [Authorise] attribute then is redirected to login page, and after login is redirected back.

This is how it's work in my case at MVC Core WebApp.

Is that information found somewhere?

You can find more information here:

• ASP.NET Core Authorization
• AuthorizeAttribute

My VS2015 project gets lost in space when the [Authorize] is added

This works fine for me - both on RC1 and RC2.

Looks like somewhere you have wrong configuration.

Check if you have all required packages and clean up your web.config .

Or try new/clean project from VS template and check if it's works.