使用MudBlazor.MudMenu时AuthorizeView无法正常渲染菜单选项

问题背景 #

在MudAppBar中，通过外层AuthorizeView（基于ManagementPolicy）控制MudMenu显示正常，但MudMenu内部的AuthorizeView即便用户符合对应权限策略，也无法渲染对应的MudListItem。此前使用纯Blazor+Bootstrap时相同逻辑可正常工作。

可能原因 #

MudMenu的延迟渲染机制或组件上下文传递特性，导致内部AuthorizeView无法正确获取用户授权状态；或隐式模板渲染被MudMenu容器干扰。

解决方案 #

方案1：改用代码授权判断替代组件 #

直接通过IAuthorizationService手动校验权限，避免组件嵌套的上下文问题：

1. 组件内注入服务：

@inject IAuthorizationService AuthorizationService
@inject AuthenticationStateProvider AuthenticationStateProvider

2. 替换内部AuthorizeView为条件判断：

<MudAppBar Color="Color.Primary" Fixed="false" Class="">
    <AuthorizeView Policy="ManagementPolicy" Context="management">
        <MudMenu Class="d-none d-md-flex mud-text-primary px-2 h-100" 
                EndIcon="@Icons.Material.Filled.ArrowDropDown" AnchorOrigin="Origin.BottomCenter" 
                Label="@StringResource["Management"]">

            @if ((await AuthorizationService.AuthorizeAsync((await AuthenticationStateProvider.GetAuthenticationStateAsync()).User, Permissions.ManageUsers)).Succeeded)
            {
                <MudListItem Href="users" IconColor="Color.Primary">
                    @StringResource["Users"]
                </MudListItem>      
            }

            <MudListItem Href="users" IconColor="Color.Primary">
                @StringResource["Users"]
            </MudListItem>

            @if ((await AuthorizationService.AuthorizeAsync((await AuthenticationStateProvider.GetAuthenticationStateAsync()).User, Permissions.ManageRoles)).Succeeded)
            {
                <MudListItem Href="users/roles" IconColor="Color.Primary">
                    @StringResource["Roles"]
                </MudListItem>
            }
        </MudMenu>
    </AuthorizeView>
</MudAppBar>

方案2：显式指定AuthorizeView的Authorized模板 #

明确写出授权成功时的渲染块，避免隐式模板被干扰：

<AuthorizeView Policy="@Permissions.ManageUsers">
    <Authorized>
        <MudListItem Href="users" IconColor="Color.Primary">
            @StringResource["Users"]
        </MudListItem>      
    </Authorized>
</AuthorizeView>

方案3：校验权限策略配置与绑定 #

1. 确认Permissions类的常量定义正确：

public static class Permissions
{
    public const string ManageUsers = "ManageUsers";
    public const string ManageRoles = "ManageRoles";
}

2. 检查Program.cs中策略配置是否匹配：

builder.Services.AddAuthorization(options =>
{
    options.AddPolicy("ManagementPolicy", policy =>
        policy.RequireAssertion(context =>
            context.User.HasClaim(c => c.Type == "Permission" && 
                (c.Value == Permissions.ManageUsers || c.Value == Permissions.ManageRoles))));

    options.AddPolicy(Permissions.ManageUsers, policy =>
        policy.RequireClaim("Permission", Permissions.ManageUsers));

    options.AddPolicy(Permissions.ManageRoles, policy =>
        policy.RequireClaim("Permission", Permissions.ManageRoles));
});

3. 验证用户登录时是否正确携带了Permission类型的Claim。

内容的提问来源于stack exchange，提问作者Román Alvarez