ASP.NET Core disable authentication in development environment

by

On updating to net core 3.1, the mvc AllowAnonymousFilter was not working for us any more. We found conditionally adding a custom IAuthorizationHander to be the simplest way forward to conditionally bypass auth.

eg.

/// <summary>
/// This authorisation handler will bypass all requirements
/// </summary>
public class AllowAnonymous : IAuthorizationHandler
{
    public Task HandleAsync(AuthorizationHandlerContext context)
    {
        foreach (IAuthorizationRequirement requirement in context.PendingRequirements.ToList())
            context.Succeed(requirement); //Simply pass all requirements
        
        return Task.CompletedTask;
    }
}

Then register this handler conditionally in Startup.ConfigureServices.

private readonly IWebHostEnvironment _env;
public Startup(IWebHostEnvironment env)
{
    _env = env;
}

public void ConfigureServices(IServiceCollection services)
{
  {...}

  //Allows auth to be bypassed
  if (_env.IsDevelopment())
    services.AddSingleton<IAuthorizationHandler, AllowAnonymous>();
}

Note AddAuthentication and AddAuthorization services are still registered and configured as per prod code (which is nice).

To allow our unit test to bypass auth, we added a new anonymous testbase with a startup class that added this line without any conditions. Nice and simple!

More Related Contents:

  1. Token Based Authentication in ASP.NET Core
  2. ASP.NET Core 2.0 authentication middleware
  3. ASP.NET Core 2.0 LDAP Active Directory Authentication
  4. Token Based Authentication in ASP.NET Core (refreshed)
  5. .NET Core Identity Server 4 Authentication VS Identity Authentication
  6. Custom Authentication in ASP.Net-Core
  7. ASP.NET Core 2.0 disable automatic challenge
  8. Simple JWT authentication in ASP.NET Core 1.0 Web API
  9. Simple token based authentication/authorization in asp.net core for Mongodb datastore
  10. ASP.NET Core Web API Authentication
  11. ASP.NET Core Web API exception handling
  12. Dynamically change connection string in Asp.Net Core
  13. How should I inject a DbContext instance into an IHostedService?
  14. Calling function from generated button in Blazor
  15. How to update values into appsetting.json?
  16. Error making Azure Management Library API call when authenticating with azure active directory
  17. Uploading and Downloading large files in ASP.NET Core 3.1?
  18. Get current URL in a Blazor component
  19. how to generate a unique token which expires after 24 hours?
  20. How to implement custom authentication in ASP.NET MVC 5
  21. Read appsettings json values in .NET Core Test Project
  22. Convert IHtmlContent/TagBuilder to string in C#
  23. Unable to resolve service for type while attempting to activate
  24. ASP.NET Core middleware vs filters
  25. Multiple Authorization attributes on method
  26. The HTTP request is unauthorized with client authentication scheme ‘Negotiate’. The authentication header received from the server was ‘NTLM’
  27. Tag helper not being processed in ASP.NET Core 2
  28. Prevent from displaying of Windows Security window
  29. How to convert a file into byte array in memory?
  30. What Nuget packages must be referenced by an ASP.NET Core 6 application parts project

Leave a Comment