How to Disable : Authorise attribute automatically login the userasp.net web form client with identity server 4Aps .net IdentityServer4 authorizeAuthorize attribute failure redirects to logout in API rather than returns 401Including Core Identity role claims in Identity Server 4 id_tokenHow to trigger login for IdentityServer4 without accessing secure page in the MVC app?Cannot sign out the OpenIdConnect authentication of identityserver4 on ASP.NET Core 2 applicationIdentity server 4 strange behavior, not redirecting back to the mvc client after loginAsp .Net Core, Identity Server 4, Check if user is authorized without authorized attributeHow to get Authorization code from identity server without login formCallback to client app after sign out - Identity server 4

Why Does Mama Coco Look Old After Going to the Other World?

What are some really overused phrases in French that are common nowadays?

How do free-speech protections in the United States apply in public to corporate misrepresentations?

Is there a set of positive integers of density 1 which contains no infinite arithmetic progression?

Will Roalesk, Apex Hybrid, trigger Sharktocrab twice?

What is the meaning of the Russian idiom "to taste tuna" ("отведать тунца")?

How to trick the reader into thinking they're following a redshirt instead of the protagonist?

What does a topology do, and what makes a particular topology the 'right' one?

Why can my keyboard only digest 6 keypresses at a time?

How can I make 12 tone and atonal melodies sound interesting?

How creative should the DM let an artificer be in terms of what they can build?

Solve Riddle With Algebra

Does the new finding on "reversing a quantum jump mid-flight" rule out any interpretations of QM?

What standard algorithm can determine if exactly one of a container satisfies a predicate?

Did Apple bundle a specific monitor with the Apple II+ for schools?

Proving that a Russian cryptographic standard is too structured

Are inverted question and exclamation mark supposed to be symmetrical to the "normal" counter-parts?

How to safely destroy (a large quantity of) valid checks?

Electricity free spaceship

Why did Intel abandon unified CPU cache?

Why am I Seeing A Weird "Notch" on the Data Line For Some Logical 1s?

How can I protect this exterior outlet from water and prevent smoke leakage to the interior?

Which is the better way to call a method that is only available to one class that implements an interface but not the other one?

How to publish items after pipeline is finished?



How to Disable : Authorise attribute automatically login the user


asp.net web form client with identity server 4Aps .net IdentityServer4 authorizeAuthorize attribute failure redirects to logout in API rather than returns 401Including Core Identity role claims in Identity Server 4 id_tokenHow to trigger login for IdentityServer4 without accessing secure page in the MVC app?Cannot sign out the OpenIdConnect authentication of identityserver4 on ASP.NET Core 2 applicationIdentity server 4 strange behavior, not redirecting back to the mvc client after loginAsp .Net Core, Identity Server 4, Check if user is authorized without authorized attributeHow to get Authorization code from identity server without login formCallback to client app after sign out - Identity server 4






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;








0















I'm having an issue with identity server.



When unauthenticated If I try to access an action that has the authorize attribute I am taken to the login page to login(as expected)



After I logout then try to access an action that has the authorize attribute, I am given access.



After Logout When I access non secure action I can see that User.Identity.IsAuthenticated is false but when I try to access a secure action , I am granted access and I see that User.Identity.IsAuthenticated is true.



I assume that this is part of the functionality. How can I disable it?










share|improve this question




























    0















    I'm having an issue with identity server.



    When unauthenticated If I try to access an action that has the authorize attribute I am taken to the login page to login(as expected)



    After I logout then try to access an action that has the authorize attribute, I am given access.



    After Logout When I access non secure action I can see that User.Identity.IsAuthenticated is false but when I try to access a secure action , I am granted access and I see that User.Identity.IsAuthenticated is true.



    I assume that this is part of the functionality. How can I disable it?










    share|improve this question
























      0












      0








      0








      I'm having an issue with identity server.



      When unauthenticated If I try to access an action that has the authorize attribute I am taken to the login page to login(as expected)



      After I logout then try to access an action that has the authorize attribute, I am given access.



      After Logout When I access non secure action I can see that User.Identity.IsAuthenticated is false but when I try to access a secure action , I am granted access and I see that User.Identity.IsAuthenticated is true.



      I assume that this is part of the functionality. How can I disable it?










      share|improve this question














      I'm having an issue with identity server.



      When unauthenticated If I try to access an action that has the authorize attribute I am taken to the login page to login(as expected)



      After I logout then try to access an action that has the authorize attribute, I am given access.



      After Logout When I access non secure action I can see that User.Identity.IsAuthenticated is false but when I try to access a secure action , I am granted access and I see that User.Identity.IsAuthenticated is true.



      I assume that this is part of the functionality. How can I disable it?







      asp.net-core-2.0 identityserver4






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Mar 24 at 19:53









      DavidDavid

      3,187123458




      3,187123458






















          1 Answer
          1






          active

          oldest

          votes


















          0














          It turns out I had a bug



          Log out Code:



          public async Task<ActionResult> LogOut()

          await HttpContext.SignOutAsync("Cookies");
          await HttpContext.SignOutAsync("oidc");
          return RedirectToAction("Index");



          Changed to :



          public IActionResult Logout()

          return new SignOutResult(new[] "Cookies", "oidc" );






          share|improve this answer























            Your Answer






            StackExchange.ifUsing("editor", function ()
            StackExchange.using("externalEditor", function ()
            StackExchange.using("snippets", function ()
            StackExchange.snippets.init();
            );
            );
            , "code-snippets");

            StackExchange.ready(function()
            var channelOptions =
            tags: "".split(" "),
            id: "1"
            ;
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function()
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled)
            StackExchange.using("snippets", function()
            createEditor();
            );

            else
            createEditor();

            );

            function createEditor()
            StackExchange.prepareEditor(
            heartbeatType: 'answer',
            autoActivateHeartbeat: false,
            convertImagesToLinks: true,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: 10,
            bindNavPrevention: true,
            postfix: "",
            imageUploader:
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            ,
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            );



            );













            draft saved

            draft discarded


















            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55327944%2fhow-to-disable-authorise-attribute-automatically-login-the-user%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown

























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes









            0














            It turns out I had a bug



            Log out Code:



            public async Task<ActionResult> LogOut()

            await HttpContext.SignOutAsync("Cookies");
            await HttpContext.SignOutAsync("oidc");
            return RedirectToAction("Index");



            Changed to :



            public IActionResult Logout()

            return new SignOutResult(new[] "Cookies", "oidc" );






            share|improve this answer



























              0














              It turns out I had a bug



              Log out Code:



              public async Task<ActionResult> LogOut()

              await HttpContext.SignOutAsync("Cookies");
              await HttpContext.SignOutAsync("oidc");
              return RedirectToAction("Index");



              Changed to :



              public IActionResult Logout()

              return new SignOutResult(new[] "Cookies", "oidc" );






              share|improve this answer

























                0












                0








                0







                It turns out I had a bug



                Log out Code:



                public async Task<ActionResult> LogOut()

                await HttpContext.SignOutAsync("Cookies");
                await HttpContext.SignOutAsync("oidc");
                return RedirectToAction("Index");



                Changed to :



                public IActionResult Logout()

                return new SignOutResult(new[] "Cookies", "oidc" );






                share|improve this answer













                It turns out I had a bug



                Log out Code:



                public async Task<ActionResult> LogOut()

                await HttpContext.SignOutAsync("Cookies");
                await HttpContext.SignOutAsync("oidc");
                return RedirectToAction("Index");



                Changed to :



                public IActionResult Logout()

                return new SignOutResult(new[] "Cookies", "oidc" );







                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered Mar 24 at 20:38









                DavidDavid

                3,187123458




                3,187123458





























                    draft saved

                    draft discarded
















































                    Thanks for contributing an answer to Stack Overflow!


                    • Please be sure to answer the question. Provide details and share your research!

                    But avoid


                    • Asking for help, clarification, or responding to other answers.

                    • Making statements based on opinion; back them up with references or personal experience.

                    To learn more, see our tips on writing great answers.




                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function ()
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55327944%2fhow-to-disable-authorise-attribute-automatically-login-the-user%23new-answer', 'question_page');

                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown







                    Popular posts from this blog

                    Kamusi Yaliyomo Aina za kamusi | Muundo wa kamusi | Faida za kamusi | Dhima ya picha katika kamusi | Marejeo | Tazama pia | Viungo vya nje | UrambazajiKuhusu kamusiGo-SwahiliWiki-KamusiKamusi ya Kiswahili na Kiingerezakuihariri na kuongeza habari

                    Swift 4 - func physicsWorld not invoked on collision? The Next CEO of Stack OverflowHow to call Objective-C code from Swift#ifdef replacement in the Swift language@selector() in Swift?#pragma mark in Swift?Swift for loop: for index, element in array?dispatch_after - GCD in Swift?Swift Beta performance: sorting arraysSplit a String into an array in Swift?The use of Swift 3 @objc inference in Swift 4 mode is deprecated?How to optimize UITableViewCell, because my UITableView lags

                    Access current req object everywhere in Node.js ExpressWhy are global variables considered bad practice? (node.js)Using req & res across functionsHow do I get the path to the current script with Node.js?What is Node.js' Connect, Express and “middleware”?Node.js w/ express error handling in callbackHow to access the GET parameters after “?” in Express?Modify Node.js req object parametersAccess “app” variable inside of ExpressJS/ConnectJS middleware?Node.js Express app - request objectAngular Http Module considered middleware?Session variables in ExpressJSAdd properties to the req object in expressjs with Typescript