.NET Core 7 Razor Pages中IAuthenticationHandler相关CS0311错误修复求助

Error CS0311
The type 'WebAppSecurity.Authorization.HRManagerProbationRequirmentHandle' cannot be used as type parameter 'TImplementation' in the generic type or method 'ServiceCollectionServiceExtensions.AddSingleton<TService, TImplementation>(IServiceCollection)'. There is no implicit reference conversion from 'WebAppSecurity.Authorization.HRManagerProbationRequirmentHandle' to 'Microsoft.AspNetCore.Authentication.IAuthenticationHandler'. WebAppSecurity F:\WebProj\WebAppSecurity\WebAppSecurity\Program.cs

相关代码 #

Program.cs代码 #

using Microsoft.AspNetCore.Authentication;
using WebAppSecurity.Authorization;

var builder = WebApplication.CreateBuilder(args);

// Add services to the container.
builder.Services.AddRazorPages();
builder.Services.AddAuthentication().AddCookie("MyCookieAuth", options => 
{
    options.Cookie.Name = "MyCookieAuth";
    options.LoginPath = "/Account/Login";
    
});
builder.Services.AddAuthorization(options => 
{
    options.AddPolicy("MustBelongToHRDeparteman",policy => policy.RequireClaim("Department","HR"));
    options.AddPolicy("AdminOnly",policy => policy.RequireClaim("Admin"));
    options.AddPolicy("HRAdmin", policy => policy.RequireClaim("Department", "HR").RequireClaim("Manager").Requirements.Add(new HRManagerProbationRequirment(3)));
});

builder.Services.AddSingleton<IAuthenticationHandler, HRManagerProbationRequirmentHandle>();

var app = builder.Build();

// Configure the HTTP request pipeline.
if (!app.Environment.IsDevelopment())
{
    app.UseExceptionHandler("/Error");
    // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
    app.UseHsts();
}

app.UseHttpsRedirection();
app.UseStaticFiles();

app.UseRouting();

app.UseAuthorization();

app.MapRazorPages();

app.Run();

HRManager相关代码 #

using Microsoft.AspNetCore.Authorization;

namespace WebAppSecurity.Authorization
{
    public class HRManagerProbationRequirment : IAuthorizationRequirement
    {
        public HRManagerProbationRequirment(int probationMonth)
        {
            ProbationMonth = probationMonth;
        }

        public int ProbationMonth { get; }
    }

    public class HRManagerProbationRequirmentHandle : AuthorizationHandler<HRManagerProbationRequirment>
    {
        protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, HRManagerProbationRequirment requirement)
        {
            if (!context.User.HasClaim(x => x.Type == "EmploymentDate"))
            {
                return Task.CompletedTask;
            };

            if (DateTime.TryParse(context.User.FindFirst(x => x.Type == "EmploymentDate")?.Value, out DateTime employmentDate)) 
            {
                var period = DateTime.Now - employmentDate;

                if (period.Days > 30 * requirement.ProbationMonth)
                {
                    context.Succeed(requirement);
                }
            };

            return Task.CompletedTask;
        }
    }
}

Login页面代码 #

using Microsoft.AspNetCore.Authentication;
using Microsoft.AspNetCore.Mvc;
using Microsoft.AspNetCore.Mvc.RazorPages;
using System.ComponentModel.DataAnnotations;
using System.Security.Claims;

namespace WebAppSecurity.Pages.Account
{
    public class LoginModel : PageModel
    {
        [BindProperty]
        public Credential Credential { get; set; } = new Credential();

        public void OnGet()
        {
        }

        public async Task<ActionResult> OnPostAsync()
        {
            if (!ModelState.IsValid)
            {
                return Page();
            }

            if (Credential.UserName == "admin" && Credential.Password == "admin") 
            {
                var claims = new List<Claim> 
                {
                    new Claim(ClaimTypes.Name,"admin"),
                    new Claim(ClaimTypes.Email,"admin@gmail.com"),
                    new Claim("Department" ,"HR"),
                    new Claim("Admin","true"),
                    new Claim("Manager","true"),
                    new Claim("EmploymentDate","2023-03-03"),
                };

                var identity = new ClaimsIdentity(claims, "MyCookieAuth");

                ClaimsPrincipal principal = new ClaimsPrincipal(identity);

                await HttpContext.SignInAsync("MyCookieAuth", principal);

                return RedirectToPage("/Index");
            }

            return Page();
        }
    }

    public class Credential
    {
        [Required]
        [Display(Description ="User Name")]
        public string UserName { get; set; } = string.Empty;
        [Required]
        [DataType(DataType.Password)]
        public string Password { get; set; } = string.Empty;
    }
}

错误原因与修复步骤 #

1. 核心错误：服务注册类型不匹配 #

HRManagerProbationRequirmentHandle是授权需求处理器（继承自AuthorizationHandler<HRManagerProbationRequirment>），但你错误地将它注册为了认证处理器（IAuthenticationHandler），这两个类型没有继承关系，导致CS0311错误。

修改Program.cs中的注册代码：
将：

builder.Services.AddSingleton<IAuthenticationHandler, HRManagerProbationRequirmentHandle>();

替换为：

builder.Services.AddSingleton<IAuthorizationHandler, HRManagerProbationRequirmentHandle>();

2. 额外修复项 #

• 策略名称拼写错误：MustBelongToHRDeparteman中的Departeman应为Department，修正后：

  options.AddPolicy("MustBelongToHRDepartment", policy => policy.RequireClaim("Department", "HR"));
  

• 中间件顺序错误：认证中间件必须在授权中间件之前执行，否则授权逻辑无法获取用户认证信息。在Program.cs的请求管道中添加UseAuthentication：

  app.UseRouting();
  
  app.UseAuthentication(); // 添加这一行，放在UseAuthorization之前
  app.UseAuthorization();
  

修复后的完整Program.cs关键片段 #

builder.Services.AddAuthorization(options => 
{
    options.AddPolicy("MustBelongToHRDepartment",policy => policy.RequireClaim("Department","HR"));
    options.AddPolicy("AdminOnly",policy => policy.RequireClaim("Admin"));
    options.AddPolicy("HRAdmin", policy => policy.RequireClaim("Department", "HR").RequireClaim("Manager").Requirements.Add(new HRManagerProbationRequirment(3)));
});

// 正确注册授权处理器
builder.Services.AddSingleton<IAuthorizationHandler, HRManagerProbationRequirmentHandle>();

// ...

app.UseRouting();

app.UseAuthentication();
app.UseAuthorization();

内容的提问来源于stack exchange，提问作者Ali Garivani