Role-based authorization not working correctly when using Blazor WebView in MAUI App

[efonsecab]

Description

I have a MAUI Blazor Hybrid App which uses Role-Base authorization.
The authorization works, and roles are correctly read by the CustomAuthenticationStateProvider.
Problem is the AuthorizeRouteView is never refreshing as expected, items requiring authorization are never shown.
I tried a force reload approach, however, there seems to be a bug related to reload:
microsoft/fluentui-blazor#1036 (comment)

dotnet/aspnetcore#52119

Here is part of my code:
https://github.com/pticostaricags/FairPlayCombined/blob/development/src/FairPlayCombinedSln/FairPlayTube.MAUI/MauiProgram.cs

https://github.com/pticostaricags/FairPlayCombined/blob/development/src/FairPlayCombinedSln/FairPlayTube.MAUI/Components/Pages/Login.razor

https://github.com/pticostaricags/FairPlayCombined/blob/development/src/FairPlayCombinedSln/FairPlayTube.MAUI/Components/Layout/MainLayout.razor

Is there any solution or workaround for this behavior so I can make the authorization flow work as expected.

Steps to Reproduce

1. Create a MAUI Blazor Hybrid App
2. Create an authorization API
3. Perform role-based authorization from the Blazor pages inside the MAUI App

Link to public reproduction project repository

No response

Version with bug

9.0.0-rc.1.24453.9

Is this a regression from previous behavior?

Yes, this used to work in .NET MAUI

Last version that worked well

Unknown/Other

Affected platforms

I was not able test on other platforms

Affected platform versions

No response

Did you find any workaround?

No workaround found yet.

Relevant log output

No response

[github-actions]

Hi I'm an AI powered bot that finds similar issues based off the issue title.

Please view the issues below to see if they solve your problem, and if the issue describes your problem please consider closing this one and thumbs upping the other issue to help us prioritize it. Thank you!

Closed similar issues:

• [Bug] MAUI Blazor Authorization components not working (#2048), similarity score: 0.76
• Maui Blazor Hybrid and authentication (#4731), similarity score: 0.72

Note: You can give me feedback by thumbs upping or thumbs downing this comment.

[halter73]

Problem is the AuthorizeRouteView is never refreshing as expected

I noticed that your CustomAuthenticationStateProvider doesn't implement AuthenticationStateChanged. How are you expecting AuthorizeRouteView to "refresh"? If the initial AuthenticationState needs to be refreshed, don't you need to signal the change?

Yes, this used to work in .NET MAUI

Did this work in a MAUI Blazor Hybrid App before? If so, can you please provide a minimal repro pinpointing the behavior that changed between versions and instructions on how to build and run the app in a way that demonstrates the regression between .NET 8 and .NET 9?

https://github.com/pticostaricags/FairPlayCombined/tree/development/src/FairPlayCombinedSln/FairPlayTube.MAUI isn't exactly minimal.

[efonsecab]

Problem is the AuthorizeRouteView is never refreshing as expected

I noticed that your CustomAuthenticationStateProvider doesn't implement AuthenticationStateChanged. How are you expecting AuthorizeRouteView to "refresh"? If the initial AuthenticationState needs to be refreshed, don't you need to signal the change?

Yes, this used to work in .NET MAUI

Did this work in a MAUI Blazor Hybrid App before? If so, can you please provide a minimal repro pinpointing the behavior that changed between versions and instructions on how to build and run the app in a way that demonstrates the regression between .NET 8 and .NET 9?

https://github.com/pticostaricags/FairPlayCombined/tree/development/src/FairPlayCombinedSln/FairPlayTube.MAUI isn't exactly minimal.

It used to work in another application before, with the same approach, with no need of using the event:

[halter73]

Can you provide a single-project repro that clearly demonstrates what breaks after updating from .NET 8 (or whatever version it used to work in) to .NET 9 that's as minimal as you can make it? It should be published to its own repository on GitHub with a commit pointing to the working code just before the upgrade and another commit after the upgrade to .NET 9 where it breaks.

The custom AuthenticationStateProvider shouldn't involve any secrets, clients, or anything like that. You can construct hard-coded ClaimsPrincipals for the purpose of the repro since the details about how a custom AuthenticationStateProvider creates its AuthenticationState is irrelevant to the framework.

[dotnet-policy-service]

Hi @efonsecab. We have added the "s/needs-repro" label to this issue, which indicates that we require steps and sample code to reproduce the issue before we can take further action. Please try to create a minimal sample project/solution or code samples which reproduce the issue, ideally as a GitHub repo that we can clone. See more details about creating repros here: https://github.com/dotnet/maui/blob/main/.github/repro.md

This issue will be closed automatically in 7 days if we do not hear back from you by then - please feel free to re-open it if you come back to this issue after that time.

[dotnet-policy-service]

This issue has been automatically marked as stale because it has been marked as requiring author feedback to reproduce the issue but has not had any activity for 4 days. It will be closed if no further activity occurs within 3 days of this comment. If it is closed, feel free to comment when you are able to provide the additional information and we will re-investigate.