You're using AuthenticationStateProvider wrong in your Blazor Server app! Let's fix it!

[@skypinoify]

You are the first one who explained this concept very well. Most of the tutorials I've seen only explain, poorly, how to set up the authentication but they don't get into the detail of revalidation. Thanks.

[@Codewrinkles]

I'm very glad to hear that. I also feel that the official docs is very vague and hard to understand. Another video on how to implement a custom AuthenticationStateProvider will come this week. I guess that these two videos together will shed some light on how everything works.

[@victorcaceres3592]

Hi In which series of your videos is the information on the management of the Menu on the right side, about Login Logout

[@chrisjack3966]

Many thanks, worked perfectly... wasn't easy following the code would be great to have had the code listed somewhere but SUPER helpful so much appreciated ;)

[@MiguelAngelHerrera]

Thank you very much! The best explanation of authentication in Blazor on the web.

[@Codewrinkles]

Glad you enjoyed it.

[@Chris-ri6ly]

Would it be possible/a good idea to call OnValidateAuthenticationStateAsync from OnInitializedAsync? So that way the user identity is checked automatically over time, but also checked before they try and access data while still in that 30s interval? Or would simply setting the interval time to 1-2 seconds be a better solution?

[@ruinenlust_]

This is what I wondered too. I don't want my unauthenticated user to still be able to do everything they could before after logging out. I want to check every begin of the method. This periodic revalidation stuff is just not secure.

[@aw__3476]

Thank you so much for this! The MS docs were really hard to follow, but this works great

[@Codewrinkles]

I'm lad to hear that. Thanks for watching.

[@ajazahmad2386]

So much thanks to elaborating the Identity method. is very appreciated..

[@ghevisartor6005]

does it also update the @page component itself for the [Authorize] attribute? so you get the NotAuthorized view on the whole page component?

[@kartingmania6590]

I really don't get why we need an extra (polling) mechanism for this. Surely, if we're making a Blazor SERVER application, we are talking to the server whenever we make any request. So surely this is the time to do any checking of session, rather than an extra mechanism that polls?

[@kaz00ie]

Thank you so much! This works in my hybrid project. Greetings from Argentina :)

[@Codewrinkles]

Great to hear!

[@RiGoRmOrTiSUK]

thank you for your videos, did you do any videos around adding roles and claims and creating pages to manage these?

[@Codewrinkles]

Unfortunately it didn't come to that. Hopefully in the future.

[@shabanelmogy7912]

i need example if i use api and jwt with blazor server how can i implement RevalidatingServerAuthenticationStateProvider

[@fh61234]

Life saver. Thank you!!

[@Codewrinkles]

Glad it helped!

[@talkathiriify]

Thank you so much for the excellent topic.

[@Codewrinkles]

I'm glad you find it useful.

[@loadiam]

Is there a way to do the same thing that you do with IdentityValidationProvider.cs with Azure AD single tenant without using EF? So that it logs users out in other browser tabs?

[@GauravKumar-ss2ic]

Your this tutorial is very well explained and very useful. Is there any tutorial prepared by you without using Identity or may be by using JWT that is provided by a completly separate hosted core webapi

[@leonardohidrovo4729]

What about using RevalidatingServerAuthenticationStateProvider when Identity Framework is not used?

[@manojnaik5643]

nice demonstration on this things, need an urgent help on creating user identity and maintain state using client server interactive auto mode, did not find any correct documentation on this, user session process made very complicated by ms. need help on this.

[@goranmaric6806]

Another great video. Thanks! Is there a way to elegantly and without usage of JavaScript implement automatic logout if user is not active for a certain period of time?

[@Codewrinkles]

Not sure exactly how this might be useful or not and it would be definitely quite hacky as you would need to keep track of each user's interaction with the app within a single circuit.

[@zohirbensalem7622]

Very good explained ..Thanks So Much and Good Luck .hope you will bring to us code in github or any thing else. that will help me

[@ajazahmad2386]

Please help me in soling the problem ie. when in registered the authenticatiostateproder , as //builder.Services.AddScoped(); during running the application it give the error like "unable to connect the web server https the webserver is no longer sunning "

[@TheNollidge]

Hi man! thanks for the upload this is good stuff I am working on a blazor wasm project at the moment and this video is the only one showing the issues I am trying to solve .. is there a similar solution for wasm projects? would be cool if there was a link to a example - microsoft documentation is so ambiguous to me most times and leads me in the wrong direction, unfortunately my peanut brain can't handle it. hope you see this comment! regards

[@marna_li]

I have noticed in one of my applications, where I get the UserId from a service that is wrapping the AuthenticationStateProvider, that after clicking around the service is returning a state with a User that is not authenticated, despite being logged in. This is in WebAssembly.

[@Codewrinkles]

In Blazor WebAssembly the AuthenticationStateProvider is working totally differently, but I haven't investigated it in depth so far :(

[@DavidThielen]

thank you - very helpful.

[@patrickkuhnel9531]

It's a very good video, but this only works in Razor Components. How do I check in a separate class library from which user a request comes? E.g., I have a separate class library for all my services and want to get the user's GUID to save a `LastModifiedUser`.

[@ghevisartor6005]

You should be able to have blazor services like NavigationManager available in other services if those services are injected in blazor components, so you can inject IAuthenticationStateProvider i think? Or use a middleware to set a scoped object.

[@danielrdm]

Thanks for sharing this one.

[@Codewrinkles]

I know the video is not the newest one, but it's stil actual. Thanks for dropping by.

[@nithitsathornlak2721]

Very useful, thank you so much.

[@igorlaktic8891]

Great stuff. Where we can download repo?

[@muks8398]

Hey. Do you have a GitHub for this ?

[@vanhutten1]

Thanks, a lot of useful information

[@MuhammadAshfaqSahil]

Excellent tutorial once again. Can you please share source code?

[@VästerHöger]

Is authenticated and authorized being used synonymously here?

[@VästerHöger]

Just because I know who you are does not mean you get access to everything.

[@giampaolotucci5897]

Excellent ! Tnx

[@kudasol]

What will happen if the user is logged in from another browser?

[@Codewrinkles]

I'm not sure exactly what scenario do we have in mind, but as long as you are using a RevalidatingAuthenticationStateProvider, the user will be logged out from all devices.

[@lozdbzmario]

THANKS MAN U DA BES

[@DJosh-cs5vx]

Thanks Code Wrinkles

[@Codewrinkles]

No problem!

[@donaldmafa]

Where's the source code?

[@ainy6406]

those 40 minutes can easily be condensed into 4

[@Codewrinkles]

Probably not 4, but it for sure could be condensed. This video is quite old. Nowadays my videos are much shorter and to the point.

[@EniloracCodes]

@@Codewrinkles I really love the way you explain things...I have learned so much since I started following you. I wouldn't worry about trying to condense things in your videos.

[@JohnSmith-mm9yr]

Your*

[@Codewrinkles]

I disagree :)

[@jakubmarcickiewicz774]

Great video, thanks!

[@Codewrinkles]

I'm glad you liked it.