BlazorSecurityBuilderExtensions.ConfigureAntiforgery(IBlazorSecurityBuilder, Action<AntiforgeryValidationOptions>) Method

Namespace: DevExpress.ExpressApp.ApplicationBuilder

Assembly: DevExpress.ExpressApp.Blazor.v25.1.dll

NuGet Package: DevExpress.ExpressApp.Blazor

Declaration

C#

public static IBlazorSecurityBuilder ConfigureAntiforgery(
    this IBlazorSecurityBuilder builder,
    Action<AntiforgeryValidationOptions> configureOptions
)

VB.NET

<ExtensionAttribute>
Public Shared Function ConfigureAntiforgery(
    builder As IBlazorSecurityBuilder,
    configureOptions As Action(Of AntiforgeryValidationOptions)
) As IBlazorSecurityBuilder

Parameters

Name	Type
builder	IBlazorSecurityBuilder
configureOptions	Action<DevExpress.ExpressApp.Security.AntiforgeryValidationOptions>

Returns

Type
IBlazorSecurityBuilder

Remarks

Important

The Antiforgery mechanism in Web API apps with Windows authentication can result in error 400. You can use the AntiforgeryOptions.ExcludeAuthenticationSchemes property to disable antiforgery for Windows authentication:

builder.Security
    .UseIntegratedMode(options => {...})
    .ConfigureAntiforgery(opt => {
        opt.ExcludeAuthenticationSchemes.Add("NTLM"); // for Kestrel
        opt.ExcludeAuthenticationSchemes.Add("Negotiate"); // for IIS
    });