Authorize(Roles = "Admin") 始终返回 ACCESS DENIED

Question

我花了很多时间在这件事上，看起来很简单，但找不到解决方案。

创建一个项目并运行良好，登录，注册等。但授权不适用于角色。创建并设置角色：

但尝试访问时总是返回 Access Denied：

public class _ConfigurationsController : Controller

{

    [Authorize(Roles = "AdminApp")]

    public IActionResult Index()

    {

        return View();

    }

}

启动.cs ...

public void ConfigureServices(IServiceCollection services)

{

    services.Configure<CookiePolicyOptions>(options =>

    {

        // This lambda determines whether user consent for non-essential cookies is needed for a given request.

        options.CheckConsentNeeded = context => true;

        options.MinimumSameSitePolicy = SameSiteMode.None;

    });

    services.AddDbContext<ApplicationDbContext>(options =>

        options.UseSqlServer(Configuration.GetConnectionString("MyConnection")));

    services.AddDbContext<Scaffolding_AutoGer_Context>(options =>

        options.UseSqlServer(Configuration.GetConnectionString("MyConnection")));

    services.AddDefaultIdentity<IdentityUser>()

        .AddRoles<IdentityRole>()

        .AddRoleManager<RoleManager<IdentityRole>>()

        .AddDefaultTokenProviders()

        .AddEntityFrameworkStores<ApplicationDbContext>();

    services.AddSingleton<IHttpContextAccessor, HttpContextAccessor>();

    services.AddMvc().SetCompatibilityVersion(CompatibilityVersion.Version_2_1);

}

public void Configure(IApplicationBuilder app, IHostingEnvironment env, IServiceProvider serviceProvider)

{

    if (env.IsDevelopment())

    {

        app.UseDeveloperExceptionPage();

        app.UseDatabaseErrorPage();

    }

    else

    {

        app.UseExceptionHandler("/Home/Error");

        app.UseHsts();

    }

    app.UseHttpsRedirection();

    app.UseStaticFiles();

    app.UseCookiePolicy();

    app.UseAuthentication();

    app.UseMvc(routes =>

    {

        routes.MapRoute(

            name: "default",

            template: "{controller=Home}/{action=Index}/{id?}");

    });

}

AspNet用户表

AspNetUserRoles 表

MVC - 脚手架项目个人账户登录.NET Core 2.1 VS 2017

Answer 1

我认为您的问题与没有配置策略有关。在public void ConfigureServices(IServiceCollection services)指定这些。 services.AddAuthorization(options =>             options.AddPolicy("AdminApp",                 policy => policy.RequireClaim("Manager")));