Developer technologies | ASP.NET | ASP.NET Core
A set of technologies in the .NET Framework for building web applications and XML web services.
How to prevent user from access my web application without login blazor ?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(163.2, 74%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Ahmed Salah Abed Elaziz
390
Reputation points
I work on blazor server side . i face issue i can't redirect user to login page when he try to access web application my scenario as below : 1-i open my web application as www.union.com .
2-it open login page as first page
3-i make login it log successfully then it open dashboard page after login success as www.union.com/Dashboard/AElaziz
AElaziz is user name
4-i copy this link and open new page on google chrome and past it then run page
it open dashboard without login
so How to prevent this behaviour form happen on blazor server side ?
also if there are easy solution without without using identity please provide me
Developer technologies | ASP.NET | ASP.NET Core
Developer technologies | .NET | Blazor
Developer technologies | .NET | Blazor
A free and open-source web framework that enables developers to create web apps using C# and HTML, developed by Microsoft.
Developer technologies | ASP.NET | Other
Developer technologies | ASP.NET | Other
A set of technologies in .NET for building web applications and web services. Miscellaneous topics that do not fit into specific categories.
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous2023-04-07T07:10:42.28+00:00 if there are easy solution without without using identity please provide me
At present, in your application, you are using Asp.net core Identity to implement authentication and authorization, right?
3-i make login it log successfully then it open dashboard page after login success
In this step, whether you are using the Chrome browser or other kind of browsers?
4-i copy this link and open new page on google chrome and past it then run page it open dashboard without login
If in the previous step, you also using chrome. And in your application, you are using cookie Authentication (by default Asp.net core Identity also use cookie authentication), it will cause this issue (open dashboard without login), because the authentication cookie is stored in the browser, before the cookie expired, no matter opens a new tab or opens a new browser window, there is no need to login again. In same kind of browser windows, this is the normal behavior, there is no need to prevent it. If you open a new Incognito/InPrivate browser window or open another kind of browser window, you have to login again.
Best regards,
Dillion
Sign in to comment
Sign in to answer