Blazor Server - Make Specific Pages Anonymous by Keeping Root Folder Authorized

Question

0

I am using .NET5 Blazor server application. I have below code in my Startup.cs, which is making sure that always show OKTA login page if user not authenticated.

services.AddRazorPages(options =>
            {
                options.Conventions.AuthorizeFolder("/");
                options.Conventions.AllowAnonymousToPage("/anonymous");

                //No error here but no effect either
            }
            );

If you notice that I want to access a page "/anonymous", wthout authentication. But always it's routing to OKTA. How can I skip this routing and directly access "/anonymous"? I must need to keep the line options.Conventions.AuthorizeFolder("/");

My App.razor has bene enabled with CascadingAuthenticationState view, which also need to keep.

<CascadingAuthenticationState>
    <Router AppAssembly="@typeof(Program).Assembly">
        <Found Context="routeData">
            <AuthorizeRouteView RouteData="@routeData" DefaultLayout="@typeof(MainLayout)">
                <NotAuthorized>
                    <h4>Sorry, you're not authorized to reach this page.</h4>
                </NotAuthorized>
                <Authorizing>
                    <h4>Authentication in progress...</h4>
                </Authorizing>
            </AuthorizeRouteView>
        </Found>
        <NotFound>
            <LayoutView Layout="@typeof(MainLayout)">
                <p>Sorry, there's nothing at this address.</p>
            </LayoutView>
        </NotFound>
    </Router>
</CascadingAuthenticationState>

i tried appied @attribute [AllowAnonymous] as well. Any lead would be appreciated

Answer 1

Hi @Mathews, Jaish

It seems that the .razor files aren't part of those authorization options.

Unless you create a cshtml file, you can use options.Conventions.AllowAnonymousToPage

Best regards
Yinqiu Yao

---

If the answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.