PageRemote attribute has a bug

[miladahmadi33]

Is there an existing issue for this?

• I have searched the existing issues

Describe the bug

I'm using .NET 6 and razor pages.
[PageRemote] attribute in POST method doesn't send __requestverificationtoken to server and I get error 400.

Expected Behavior

PageRemote attribute doesn't work and doesn't send __requestverificationtoken filed on post method.
This is my ViewModel

public class AddCategory
{
    [PageRemote(PageName = "Category", PageHandler = "CheckForTitle",
    HttpMethod = "POST",
    AdditionalFields = "__RequestVerificationToken",
    ErrorMessage = "This title is duplicate")]
    public string Title { get; set; } = null!;
 }

And this is my handler

public class CategoryModel : PageModel
{
    [BindProperty]
    public AddCategory Category { get; set; }

    public void OnGet()
    {
    }

    public IActionResult OnPostCheckTitle(AddCategory category)
    {
        return new JsonResult(category.Title == "a");
    }
}

GET method is ok and everything is fine, but in POST method __requestverificationtoken doesn't send to the server and I get error 400.

Steps To Reproduce

No response

Exceptions (if any)

No response

.NET Version

6.0.101

Anything else?

No response

We've moved this issue to the Backlog milestone. This means that it is not going to be worked on for the coming release. We will reassess the backlog following the current release and consider this item at that time. To learn more about our issue management process and to have better expectation regarding different types of issues you can read our Triage Process.

[ShreyasJejurkar]

@pranavkm I can reproduce this issue with current .NET 6 as well.
I have found the root cause as well ( I guess so ).

The issue in jquery.validate.unobtrusive.js file that we import for validation purposes.

I tried to debug the JS file which is minified to find a cause.

The issue is above on the line where my current debugger is. If you see it's trying to find control and its corresponding value so that that can be sent as payload to the server. For other properties, it works fine if you see below. My property was Email in Student Model with Student object name as StudentData. As the JS is minified, not sure why we are adding \\ in between property names. See below in the image. But still, it can be able to find correct control and grab its value.

The problem arises for __RequestForgeryToken, it cannot able to find the correct DOM input control. I doubt is it something to when there \\ and __ simultaneously.

[ShreyasJejurkar]

Yes, I guess there is some issue when we have field with __ at the start. See below, I deliberately added __TestValue to the model and the page. But that did not work. The value was not picked by jquery when doing remote requests.

The request.

The model

[ShreyasJejurkar]

Where can I find the actual source code of jquery.validate.unobtrusive.js so that I can debug it much easier? Debugging minified files of JS is not so much fun! :) @pranavkm

[yankarinRG]

Where can I find the actual source code of jquery.validate.unobtrusive.js so that I can debug it much easier? Debugging minified files of JS is not so much fun! :) @pranavkm

Here is the source code: https://github.com/aspnet/jquery-validation-unobtrusive/blob/main/src/jquery.validate.unobtrusive.js 🙂