Asp .Net Core 5 Identity - How to fetch a user?
In the new SPA (react and angular) web templates for .Net core 5. I'd like to fetch the current logged in User. However, when I try to get a user in the controller the User doesn't have anything populated.
Does anyone know how to achieve this with the new Identity Classes?
I've made a repo of the vanilla reactJS template, the only thing I changed is the line highlighted in my screenshot below to show there's no user set.
I've done a bit of googling and these pages are all I could find on the topic, unfortunately, they don't give enough detail for me to be able to implement anything practical.
- https://learn.microsoft.com/en-us/aspnet/core/security/authentication/identity-api-authorization?view=aspnetcore-5.0
- https://learn.microsoft.com/en-us/aspnet/core/security/authorization/claims?view=aspnetcore-5.0
To answer my own question.
In order to populate the User detail in the HttpContext you have 1 of 2 routes. Either change
services.AddDefaultIdentity<IdentityUser>();
to
services.AddIdentity<IdentityUser, IdentityRole>();
or you can continue to use the Core Identity
services.AddIdentityCore<IdentityUser>();
but then you also need to implement your own Microsoft.AspNetCore.Identity.ISecurityStampValidator and add it as transient services.AddTransient<ISecurityStampValidator, MyValidator>();
Your MyValidator implementation will be responsible for validating the cookie. You can see the default implementation here on github
Edit: Under the hood services.AddDefaultIdentity<IdentityUser>(); uses services.AddIdentityCore<IdentityUser>();. I feel like its importatnt to know this.
- ASP.NET Core Google Auth with JWT - InvalidOperationException when using SignInAsync
- ECDSA-signed JWT validation failures between .NET and PHP
- The audience is invalid error
- Cannot login and get JWT Token using Haskell Network.HTTP.Simple
- "given_name" not being mapped to claims from JWT in ASP.NET Core 8 application
- Generating JWT token with JwtUtil class in Spring Boot resulting in NullPointerException
- jsonwebtoken.sign() function doesn't accept process.expiresIn variable
- How Spring Security Filter Chain works
- How to store jwt in cookie and pass it to authentication function when redirecting a page?
- How to use jti claim in a JWT
- Web api core returns 404 when adding Authorize attribute
- Call Graph API using the Azure Function managed identity is raising this error "Acces Denied"
- Getting 'secretOrPrivateKey must have a value' error in NestJS JWT authentication
- Angular - AuthService Claiming Admin Role
- Maven dependencies for jjwt (json web token) on a spring boot project
- Sudden occurrence of IDX10500
- ExpressJs JWT secret or public key must be provided
- How to get username from Django Rest Framework JWT token
- How to secure JWT tokens with a DRF backend supporting both mobile and SPA clients?
- Why is a JWT split into three dot-delimited parts?
- How to set jwt token expiry time to maximum in nodejs?
- Invalidating JSON Web Tokens
- Why is lexik-jwt bundle returning an empty token with correct credentials?
- JWT signature does not match locally computed signature
- How to prevent Insecure Direct Object Reference (IDOR) using self issued JWT
- How do I log authorization attempts in .net core
- JWT Token Expiration Handling Causing 500 Error in Flask-JWT-Extended and Flask-Restful
- How do I set up a different cookie for authentication in an ASP.NET Core Web API?
- How can I set up both a Refresh/Access Token as HTTP-Only?
- Authorization header not reaching the server in laravel project