Blazor UI: Authentication

The application startup template is properly configured to use OpenId Connect to authenticate the user;

• When the Blazor application needs to authenticate, it is redirected to the server side.
• Users can enter username & password to login if they already have an account. If not, they can use the register form to create a new user. They can also use forgot password and other features. The server side uses OpenIddict to handle the authentication.
• Finally, they are redirected back to the Blazor application to complete the login process.

This is a typical and recommended approach to implement authentication in Single-Page Applications. The client side configuration is done in the startup template, so you can change it.

See the Blazor Security document to understand and customize the authentication process.

Authentication URLs

AbpAuthenticationOptions centralizes the login and logout routes used by ABP Blazor authentication services. The shared web defaults are Account/Login and Account/Logout. A standalone Blazor WebAssembly application changes them to authentication/login and authentication/logout; this override is not applied when the client is hosted as part of a Blazor Web App.

Configure the options when the application uses custom routes:

Configure<AbpAuthenticationOptions>(options =>
{
    options.LoginUrl = "authentication/sign-in";
    options.LogoutUrl = "authentication/sign-out";
});