dotnet / dotnet/aspnetcore

Warn when [Authorize] is overridden on SignalR Hubs, Razor Pages, and Razor Components

Open
#56,435 0 comments 0 reactions 0 assignees View on GitHub
analyzer area-auth enhancement
Dominant language
C#
Stars
38.4k
Forks
10.9k
Avg merge
2d 10h
Merged PRs (30d)
281

Description

It would be nice to expand analyzer warning ASP0026, "[Authorize] overridden by [AllowAnonymous] from farther away", to apply not only to MVC Controllers and Actions, but also to SignalR Hubs (and Hub methods), Razor Pages, and Razor Components.

https://github.com/dotnet/aspnetcore/pull/56244 introduced this analyzer for MVC Controllers.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.