ASP0001 warning (UseAuthorization should appear between UseRouting and UseEndpoints is incorrectly reported when middleware is nested in app.Map

[vsfeedback]

This issue has been moved from a ticket on Developer Community.

---

The warning “The call to UseAuthorization should appear between app. UseRouting and app. UseEndpoints(…) for authorization to be correctly use”. is incorrectly reported in the below scenario:

        app. Map("/api", api =>
        {
            api. UseRouting();
            api. UseAuthentication();
            api. UseAuthorization();
            api. UseEndpoints(endpoints =>
            {
                endpoints. MapControllers()
               . RequireAuthorization();
            });
        });

This code does not evoke the warning if placed outside the Map block

---

Original Comments

Feedback Bot on 9/18/2023, 08:18 PM:

(private comment, text removed)

---

Original Solutions

(no solutions)

[captainsafia]

I wasn't able to repro this issue on the following code sample:

var builder = WebApplication.CreateBuilder(args);

builder.Services.AddAuthorization();

var app = builder.Build();

app.Map("/api", api =>
{
    api.UseRouting();
    api.UseAuthentication();
    api.UseAuthorization();
    api.UseEndpoints(endpoints =>
    {
        endpoints.MapControllers().RequireAuthorization();
    });
});


app.Run();

Is there a chance there are other middlewares configured in this application?

Hi @vsfeedback. We have added the "Needs: Author Feedback" label to this issue, which indicates that we have an open question for you before we can take further action. This issue will be closed automatically in 7 days if we do not hear back from you by then - please feel free to re-open it if you come back to this issue after that time.

[k290]

Apologies, it appears when there are other mappings included below. Here is the corrected example:

 app.Map("/api", api =>
 {
     api.UseRouting();
     api.UseAuthentication();
     api.UseAuthorization();
     api.UseEndpoints(endpoints =>
     {
         endpoints.MapControllers()
        .RequireAuthorization();
     });
 });

 app.Map("", api =>
 {
     api.UseRouting();
     api.UseEndpoints(ep =>
     {
         ep.MapFallbackToFile("index.html");
     });
 });

This issue has been automatically marked as stale because it has been marked as requiring author feedback but has not had any activity for 4 days. It will be closed if no further activity occurs within 3 days of this comment. If it is closed, feel free to comment when you are able to provide the additional information and we will re-investigate.

See our Issue Management Policies for more information.