TekH adc231f10e fix: resolve sender identity in Blazor Server SignalR circuits ...

JwtBearer middleware does not run for WebSocket upgrade requests, so
HttpContext.User is anonymous inside Blazor Server components. Fall back
to manual cookie parsing + token validation (same pattern used by
EnvelopeReceiverAuthorizationService). Cache the resulting principal on
HttpContext.User for subsequent calls within the same circuit.

Also inject IOptionsMonitor<JwtBearerOptions> and IOptions<AuthTokenKeys>
to support the validation path.

2026-09-23 15:32:44 +02:00

4.7 KiB

Raw Blame History

View Raw