In Blazor authorization, ensure scheme not specified #10570
Labels
area-blazor
Includes: Blazor, Razor Components
bug
This issue describes a behavior which is not expected - a bug.
Done
This issue has been fixed
Milestone
Currently we ignore the “scheme” on any IAuthorizeData because it’s not applicable (we already have the ClaimsPrincipal).
To ensure developers are not confused or misled about what rules apply, we should throw if any nonempty scheme value is set.
I’m not suggesting this is urgent, but I do think we should do it before 3.0 ships.
The text was updated successfully, but these errors were encountered: