Scaffolding over existing authorization

[alexiordan]

Authentication works, but User.IsInRole("X") does not return the expected value (it worked with previous version).
Is this expected?

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 804e24dd-7e30-8cf5-2c99-1ffacb4582f6
• Version Independent ID: 3e25547b-e2c9-6634-2c38-2a77207f17d4
• Content: Scaffold Identity in ASP.NET Core projects
• Content Source: aspnetcore/security/authentication/scaffold-identity.md
• Product: asp.net-core
• GitHub Login: @Rick-Anderson
• Microsoft Alias: riande

[alexiordan]

Ok, so in the first place I hade to add the AddRoles to Identity configuration
services.AddDefaultIdentity()
.AddRoles()
.AddEntityFrameworkStores();

Now it still doesn't work. However, it works the following construction

var user = await UserManager.GetUserAsync(User);
var roles = await UserManager.GetRolesAsync(user);

So, how come User.IsInRole does not work while UserManager.GetRolesAsync works?

[guardrex]

Hello @alexiordan ... did you see 👉 https://docs.microsoft.com/aspnet/core/security/authorization/roles

[alexiordan]

Yes, but what is the actual answer to my question though?

[guardrex]

ping @HaoK

[Rick-Anderson]

@HaoK see related #7041

Formerly one could use something like this in Account Controller:

 [HttpGet]
 [Authorize(Roles = "Master")]
 public IActionResult Register(string returnUrl = null)

How can I do the same thing with the new approach?

[HaoK]

Its a bug in AddDefaultIdentity/AddIdentityCore, see: aspnet/Identity#1813

[Yanal-Yves]

I followed instructions "Create full identity UI source" after creation of an MVC project with authorization.
When I start the application, click register, fill the form and click "register" button I got an exception : NotSupportedException: No IUserTwoFactorTokenProvider<TUser> named 'Default' is registered.

I fixed it by calling .AddDefaultTokenProviders() in the ConfigureServices method like this:

services.AddIdentity<IdentityUser, IdentityRole>()
    .AddEntityFrameworkStores<ApplicationDbContext>()
    .AddDefaultTokenProviders();