CODEWITHSUNDEEP
c#.net-coreasp.net-core-identity
Node.JS
Node.JS

Reputation: 1570

.NET Core 3.1 role based authorization fails, getting 403 exception

I am trying to use Microsoft Identity library to do a role base authorization and I am failing.

I don't know how to debug it further.

Startup:

services.AddIdentity<User, UserRole>(opt => opt.User.RequireUniqueEmail = true)
    .AddRoles<UserRole>()
    .AddEntityFrameworkStores<EntityDbContext>()
    .AddDefaultTokenProviders();

var jwtSetting = _configuration
    .GetSection("JwtSettings")
    .Get<JwtSettings>();

services.AddAuthentication(options => {
        options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
        options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
    })
    .AddJwtBearer(config =>
    {
        config.RequireHttpsMetadata = false;
        config.SaveToken = true;

        config.TokenValidationParameters = new TokenValidationParameters
        {
            ValidIssuer = jwtSetting.Issuer,
            ValidAudience = jwtSetting.Audience,
            IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(jwtSetting.Key))
        };
    });

My Controller with a role:

[Authorize(Roles = "Internal")]
[ApiController]
[Route("Api/[controller]")]
public class UserController : BasicCrudController<User>
{
     // Stuff here ...
}

Repo url

Upvotes: 8

Views: 3079

Answers (1)

Saeed Gholamzadeh
Saeed Gholamzadeh

Reputation: 842

You should add a claim of type ClaimsIdentity.RoleClaimType into jwt token for its role

Upvotes: 14

Related Questions