Remove authentication in ASP.net MVC single page application

Question

I am trying to play about with the asp.net MVC SPA template in visual studio 2013, I don't need any of the authentication bits, I just need to load directly onto one of the controllers pages.

How do I get rid of all the authentication stuff from the initial template?

have you considered in web.config? here is more: https://msdn.microsoft.com/en-us/library/aa291347(v=vs.71).aspx — ibininja, Jan 29 '15 at 17:19
Try this http://stackoverflow.com/questions/1333002/how-do-you-set-the-startup-page-for-debugging-in-an-asp-net-mvc-application, or you could look at maproute (If am not mistaken, been a while since I last used VC/MVC) — ibininja, Feb 01 '15 at 09:41
Slowly getting there, it no longer wants to go to the login page, and my default home page pops up for a second but then it tries to find "account/authorize" (which I had deleted because I don't want this built in authorization) I cannot find a reference to that controller in the existing code :/ — colobusgem, Feb 02 '15 at 10:07

score 24 · Answer 1 · edited May 04 '17 at 01:31

Remove the [Authorize] annotation from HomeController and remove this:

@section Scripts{
   @Scripts.Render("~/bundles/knockout")
   @Scripts.Render("~/bundles/app")
}

from Views\Home\Index.cshtml because one of does js is causing the redirect to the login page even after removing the [Authorize] annotation from HomeController and probably you don't need it. If you need these scripts in your page, then you need to edit one of them.

Matt Burland · Answer 2 · 2015-09-21T17:40:37.043

Here's what I did.

Remove [Authorize] attribute from the home controller.

Then in app.viewmodel.js you'll see this:

self[options.bindingMemberName] = ko.computed(function () {
    if (!dataModel.getAccessToken()) {
        // The following code looks for a fragment in the URL to get the access token which will be
        // used to call the protected Web API resource
        var fragment = common.getFragment();

        if (fragment.access_token) {
            // returning with access token, restore old hash, or at least hide token
            window.location.hash = fragment.state || '';
            dataModel.setAccessToken(fragment.access_token);
        } else {
            // no token - so bounce to Authorize endpoint in AccountController to sign in or register
            window.location = "/Account/Authorize?client_id=web&response_type=token&state=" + encodeURIComponent(window.location.hash);
        }
    }

    return self.Views[options.name];
});

This is the section that will redirect you to the login screen, so comment out or remove the if block. If you want you can also go into app.datamodel.js and remove or comment out self.getAccessToken.

In addition, in WebApiConfig.cs you will probably want to remove / comment out the following lines:

// Web API configuration and services
// Configure Web API to use only bearer token authentication.
config.SuppressDefaultHostAuthentication();
config.Filters.Add(new HostAuthenticationFilter(OAuthDefaults.AuthenticationType));

rej · Answer 3 · 2017-01-14T09:42:06.180

3

Here is how I solved it. I just removed the

Removed the [Authorize] annotation from HomeController.cs (got this from Castro Roy's answer). Even after this the app redirected to the login page.

To resolve the redirection remove the [Authorize] annotation from the AccountController.cs

However I have retained the authentication related code so that can be used in other pages.

edited Jan 14 '17 at 09:42

answered Jan 14 '17 at 09:31

rej

41
6

score 2 · Answer 4 · edited Sep 08 '16 at 22:32

2

Put [AllowAnonymous] at the beginning of the function you want to allow anonymous access to.

edited Sep 08 '16 at 22:32

Roman Marusyk

23,328
24
73
116

answered Mar 07 '16 at 16:55

Zonus

2,313
2
26
48

score 0 · Answer 5 · edited Sep 12 '15 at 03:24

0

In addition to removing [Authorize] from the controllers, the file home.viewmodel.js is causing the redirect problem on the home page load. In App_Start/BundleConfig.cs, remove the line ~/Scripts/app/home.viewmodel.js from the bundles/app ScriptBundle.

edited Sep 12 '15 at 03:24

Mayank Patel

3,868
10
36
59

answered Sep 12 '15 at 02:32

zba

103
1
2
7

1

why does it trigger authorization ? – Jonathan ANTOINE Sep 25 '15 at 15:50

Remove authentication in ASP.net MVC single page application

5 Answers5

Linked