Asp.net Core 3.1 MVC - Disable Authentication in Development Environment

Question

We have integrated our code with Azure AD for authentication. As per our Azure AD policy, we even require to authenticate via MFA. Hence during development, we need to enter password & also MFA which is very frustrating.

Is it possible to disable authentication in development without removing [Authorize] tag Or can we add dummy principal object ?

Here is screen grab of our code in ConfigureServices in Startup class

enter image description here

I have seen couple of post but none of option works for us.

Please help us out. Thanks in Advance

Allen Wu · Accepted Answer · 2020-11-02 02:11:46Z

In .net core 3.1, if the environment type is Development, you can add a custom IAuthorizationHander to conditionally bypass auth.

A sample in this answer:

/// <summary>
/// This authorisation handler will bypass all requirements
/// </summary>
public class AllowAnonymous : IAuthorizationHandler
{
    public Task HandleAsync(AuthorizationHandlerContext context)
    {
        foreach (IAuthorizationRequirement requirement in context.PendingRequirements.ToList())
            context.Succeed(requirement); //Simply pass all requirements

        return Task.CompletedTask;
    }
}

Then register this handler conditionally in Startup.ConfigureServices.

private readonly IWebHostEnvironment _env;
public Startup(IWebHostEnvironment env)
{
    _env = env;
}

public void ConfigureServices(IServiceCollection services)
{
  {...}

  //Allows auth to be bypassed
  if (_env.IsDevelopment())
    services.AddSingleton<IAuthorizationHandler, AllowAnonymous>();
}

Collectives™ on Stack Overflow

Asp.net Core 3.1 MVC - Disable Authentication in Development Environment

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related