如何在 core2.2 mvc 项目中使用 IClaimsTransformation

Question

I am trying to learn how to use IClaimsTransformation to modify users claims in windows authentication. But when I try to use it I get an error saying

"InvalidOperationException: No authenticationScheme was specified, and there was no DefaultChallengeScheme found."

I am mainly trying it on mac but also I tried in my company pc in company domain. Both of them gives me the same error. Also I am IIS express (debug mode from both VS and Rider).

in my startup file

public void ConfigureServices(IServiceCollection services)
    {
        services.Configure<CookiePolicyOptions>(options =>
        {
            // This lambda determines whether user consent for non-essential cookies is needed for a given request.
            options.CheckConsentNeeded = context => true;
            options.MinimumSameSitePolicy = SameSiteMode.None;
        });

        services.AddAuthentication(IISDefaults.AuthenticationScheme);
        services.AddMvc().SetCompatibilityVersion(CompatibilityVersion.Version_2_2);

        services.AddSingleton<IClaimsTransformation, UserClaims>();

    }

    // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
    public void Configure(IApplicationBuilder app, IHostingEnvironment env)
    {
        if (env.IsDevelopment())
        {
            app.UseDeveloperExceptionPage();
        }
        else
        {
            app.UseExceptionHandler("/Home/Error");
            // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
            app.UseHsts();
        }

        app.UseHttpsRedirection();
        app.UseStaticFiles();
        app.UseCookiePolicy();
        app.UseAuthentication();
        app.UseMvc(routes =>
        {
            routes.MapRoute(
                name: "default",
                template: "{controller=Home}/{action=Index}/{id?}");
        });



    }

and I have this class for claims transformation

public class UserClaims: IClaimsTransformation
{
    public Task<ClaimsPrincipal> TransformAsync(ClaimsPrincipal principal)
    {
        var ci = (ClaimsIdentity) principal.Identity;
        var c = new Claim(ci.RoleClaimType, "Admin");
        ci.AddClaim(c);
        return Task.FromResult(principal);
    }
}

also using this decorator for my controller

[Authorize(Roles = "Admin")]

Answer 1

First of all using Rider as an IDE messed up my debug settings and after deleting the demo app and restoring the debug settings to default IIS Express settings I managed to get my code working.

After that I had an 403 error every time I tried to debug my application and with the help of @itminus we found the the problem in my middlewares order. I was using UseAuthorization() over the UseAuthentication() and that was my mistake. So putting UseAuthentication() over the UseAuthorization() solved my second problem.

Answer 2

"InvalidOperationException: No authenticationScheme was specified, and there was no DefaultChallengeScheme found."

I got the same issue when I used Windows Authentication several months ago. It turns out I didn't enable the Windows Authentication .

Please check the Properties/Debug tab, and make sure the Enable Windows Authentication is checked:

---

As a side note, you're modifying the original principal . IMO, returning a brand new principal is preferred:

public Task<ClaimsPrincipal> TransformAsync(ClaimsPrincipal principal)
{
                       // create a copy
    var ci = (ClaimsIdentity)cp.Identity;
    var c = new Claim(ci.RoleClaimType, "Admin");
    ci.AddClaim(c);                               // modify the copy
    return Task.FromResult(cp);                          
}