Logging registered users

Hello,

I wonder if anyone is familiar with this article:

http://www.c-sharpcorner.com/article/asp-net-core-mvc-authentication-and-role-based-authorization-with-asp-net-core/

I'm almost done with it but I have a problem when my registered users logs in.

Whenever a user logs in, it always redirects it to the access denied page. Here is the Account Controller methods:

[HttpPost]
[AllowAnonymous]
[ValidateAntiForgeryToken]
public async Task Login(LoginViewModel model, string returnUrl = null)
{
ViewData["ReturnUrl"] = returnUrl;
if (ModelState.IsValid)
{
var result = await signInManager.PasswordSignInAsync(model.UserName, model.Password,
model.RememberMe, lockoutOnFailure: false);
if (result.Succeeded)
{
return RedirectToLocal(returnUrl);
}
else
{
ModelState.AddModelError(string.Empty, "Invalid login attempt.");
return View(model);
}
}
return View(model);
}
private IActionResult RedirectToLocal(string returnUrl)
{
if (Url.IsLocalUrl(returnUrl))
{
return Redirect(returnUrl);
}
else
{
return RedirectToAction(nameof(HomeController.Index), "Home");
}
}
public IActionResult AccessDenied()
{
return View();
}

Anytime I debug the application, and when I log in with a user, It goes to the Access Denied view.

According to the article:

Now, run the Application and login with the valid credentials. Its authentication is successful. This authenticates the user, who doesn’t have ‘User’ roles due to which it’s not authorized to access Index method of HomeController and is being redirected on access denied

But actually, I don't see anywhere a logic where the application validates if the user has a role or not, so maybe that is the reason.

Notice in this picture that altough the user is logged, and has a role, it goes to Access Denied:

Is the article wrong? Any advice is appreciated. Thanks.

3 Replies

Know the answer? Post it — somebody with the same question will find it here.

Luis Alberto Delgado de la Flor9y ago
Answer found.

The procedure that validates which users can access the main page is this:
[Authorize(Roles ="Admin")]
        public IActionResult Index()
        {
            string userName = userManager.GetUserName(User);
            return View("Index",userName);
            //return View();
            //nunca se ejecuta esta autorización?
        }
Which was inside the HomeController. In this particular line:
[Authorize(Roles ="Admin")]
So here, in the article it has another name ("User") that the ones I had defined for my project, that was the reason for which any of my users couldn't access the site.

Thanks all. Closing this topic.
0
Nilesh Shah9y ago
Manikandan Murugesan
what's your answer? It seems to me totally irrelavent.

Question has code and a technical solution is expected
0
Nilesh Shah9y ago
hmm, if you are following that article I suggest you to comment in that article so that the auther can respond or u can contact him via C# corner message feature
+1

Logging registered users

Manikandan Murugesan