[授权] 属性不能在 asp.net 核心网络中工作?

The [Authorize] attribute can not work in asp.net core web?

我在 url 中使用 cookie 身份验证:https://docs.microsoft.com/en-us/aspnet/core/security/authentication/cookie?view=aspnetcore-5.0

我使用 HttpContext.SignInAsync 用户成功,然后我打开其他具有 [Authorize]属性它重定向到登录路径并告诉我我没有登录。

为什么?

启动页:

public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
        {
            if (env.IsDevelopment())
            {
                app.UseDeveloperExceptionPage();
            }
            else
            {
                app.UseExceptionHandler("/Error");
                // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
                app.UseHsts();
            }

            app.UseHttpsRedirection();
            app.UseStaticFiles();

            app.UseRouting();

            app.UseAuthorization();
            app.UseAuthorization();

            app.UseEndpoints(endpoints =>
            {
                endpoints.MapRazorPages();
            });
        }

和服务:

services.AddRazorPages();

            services.AddDbContext<Models.DBContext>(options => options.UseSqlServer(Configuration.GetConnectionString("dbContext")));

            services.AddScoped<Models.DBContext>();

            services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
                .AddCookie(options =>
                {
                    options.LoginPath = "/Manage/Login";
                    options.LogoutPath = "/Manage/Login";
                    options.ExpireTimeSpan = TimeSpan.FromMinutes(3600);
                });

将您的代码更改为:

 app.UseAuthentication();
 app.UseAuthorization();