授权属性 - 我应该如何使用它？

Question

I used [Authorize(Roles = "Admininstrators")] to prevent users from accessing the web address under this authorization, but what should I do if I want to authorize this permission after successful login? I don't see the method on the official website. I don't know how to authorize admininstrators

Answer 1

To use [Authorize(Role)] , you must add a role to the user as in the method EnsureRole() -> await userManager.AddToRoleAsync(user, role);

https://docs.microsoft.com/en-us/aspnet/core/security/authorization/secure-data?view=aspnetcore-5.0

---

If you want to use claims for authorization, then check out this article https://docs.microsoft.com/en-us/aspnet/core/security/authorization/roles?view=aspnetcore-5.0

you need to use [Authorization(Policy)] instead of [Authorization(Role)] and specify the necessary policies in Startup.cs

services.Add authorization(parameters =>
{
  options.Add a policy ("Required Administrator Role",
  policy => policy.Required role ("Administrator"));
});