如何在 Razor 页面中添加对角色的支持和填充角色？

Question

I'm trying to figure out how to enable and populate roles in my Razor Pages application.

By following various tutorials, ConfigureServices in Startup.cs looks like this:

public void ConfigureServices(IServiceCollection services)
{
    services.AddDbContext<ApplicationDbContext>(options =>
        options.UseSqlServer(
            Configuration.GetConnectionString("DefaultConnection")));

    services.AddDefaultIdentity<ApplicationUser>(options =>
        {
            options.SignIn.RequireConfirmedAccount = false;
        })
        .AddRoles<ApplicationUser>()
        .AddEntityFrameworkStores<ApplicationDbContext>();

    services.AddRazorPages();

    // Set the default authentication policy to require users to be authenticated
    services.AddControllers(config =>
    {
        var policy = new AuthorizationPolicyBuilder()
            .RequireAuthenticatedUser()
            .Build();
        config.Filters.Add(new AuthorizeFilter(policy));
    });
}

But the call to AddDefaultIdentity raises an exception.

System.InvalidOperationException: 'AddEntityFrameworkStores can only be called with a role that derives from IdentityRole.'

Can anyone see what I'm missing here? Also, I really want to know how to populate the roles.

Answer 1

Change your IdentityUser to IdentityRole like below:

services.AddDefaultIdentity<ApplicationUser>(options =>
        {
            options.SignIn.RequireConfirmedAccount = false;
        })
        .AddRoles<IdentityRole>()  //change this
        .AddEntityFrameworkStores<ApplicationDbContext>();

Reference:

https://docs.microsoft.com/en-us/aspnet/core/security/authorization/roles?view=aspnetcore-3.1#add-role-services-to-identity

Answer 2

You might be confusing your custom roles in the application (Admin, Manager, etc) with IdentityUser.

IdentityUser is the basic model for the User records in the application.

If you want to add custom properties to the User model then create a new class that inherits from IdentityUser and add new properties. This new class is often called ApplicationUser but can be called anything you want.

Docs on customizing user model

I recommend following one tutorial. Here is one from the Microsoft documentation that goes through a number of scenarios and has source code as well.

Official tutorial on authorization and roles