Our team is currently in the process of transitioning from .Net MVC to a Vue.js front-end. We had originally implemented a custom Attribute in our MVC version that utilized Azure AD for user authentication on specific pages. This attribute verified if users were logged into Microsoft and redirected them to our organization's login page if they were not. However, after moving to Vue.js, we encountered a Cross-Origin Request Blocked error during redirection attempts.
After researching solutions online, we attempted to switch to the Non-API approach that Microsoft offers with OpenId to resolve the issue. Unfortunately, we are still facing the same Cross-Origin Request Blocked problem with this alternative method. Our team is unsure of the next steps to take. Below is a snippet showcasing how our Startup.cs file is configured along with the controller we are using for testing purposes:
Startup.cs
public void ConfigureServices(IServiceCollection services)
{
services.AddCors();
services.AddHttpClient();
services.AddMemoryCache();
services.AddAuthentication(OpenIdConnectDefaults.AuthenticationScheme)
.AddMicrosoftIdentityWebApp(_configuration.GetSection("AzureAd"));
services.AddAuthorization(options =>
{
options.AddPolicy("AuthorizeAccess",
policy => policy.Requirements.Add(new Helpside.Domain.Attributes.AuthorizeAccessAttribute()));
});
}
Controller
[Authorize]
[HttpGet("Test")]
public JsonResult Test()
{
var response = "Test";
return Json(response);
}