Asp.Net Core Scaffolded 'Register' and 'Login' redirect not working in Azure AppService - asp.net-mvc-routing

Question

Asp.Net Core 3.0 app. I am using Entity Framework Identity individual authentication and have scaffolded in a Login page and a Register page. I have an SQL database in Azure.
When I run on localhost, the registration & login work fine. I have confirmed the new user is stored in the DB Users table.
But when I deploy to Azure AppService, I get a 404 page not found error when I click the register or login button.
I have tried:
Scaled up to a paid plan and implemented CNAME Using GoDaddy & Azure for my app service to remove the .azurewebsites.net from the url
Added asp-area and asp-page to the <button> elements in my cshtml.
Turned on Azure Authentication & Authorization in App Service and added http://www.myapp.com as a redirect url.
Whitelisted all my AppService Outbound IPs in my Azure DB server firewall settings.
I have tried using the dev console in Chrome to see whats happening but I couldnt see anything useful.
Pulled some of my hair out...
Any ideas where I should look?
Additional info:
appsettings.json
{
"ConnectionStrings": {
"DefaultConnection": "Server=tcp:**-*****.database.windows.net,1433;Initial Catalog=****;Persist Security Info=False;User ID=****;Password=****;MultipleActiveResultSets=False;Encrypt=True;TrustServerCertificate=False;Connection Timeout=30;"
},
"Logging": {
"LogLevel": {
"Default": "Information",
"Microsoft": "Warning",
"Microsoft.Hosting.Lifetime": "Information"
}
},
"AllowedHosts": "*"
DbContext:
using Microsoft.AspNetCore.Identity.EntityFrameworkCore;
using Microsoft.EntityFrameworkCore;
namespace MyApp.Data
{
public class ApplicationDbContext : IdentityDbContext<ApplicationUser>
{
public ApplicationDbContext(DbContextOptions<ApplicationDbContext> options) : base(options)
{
}
}
}
Register cshtml:
<button type="submit" class="btn btn-primary" asp-area="Identity" asp-page="Register" id="RegisterButton">#_loc[Model.RegisterButtonName]</button>
Login cshtml:
<div class="form-group">
<button type="submit" class="btn btn-primary" asp-area="Identity" asp-page="Login" id="LoginButton">#_loc[Model.LoginButtonName]</button>
</div>
Error:
If I navigate to https://www.myapp.com/en/Identity/Account/Login from my homepage, the page loads fine. But when I click the Login/Register button, the redirect fails and shows the error below.
Middleware:
app.UseRouting();
app.UseAuthentication();
app.UseAuthorization();
app.UseRequestLocalization();
app.UseEndpoints(endpoints =>
{
endpoints.MapControllerRoute(
name: "default", pattern: "
{culture=en}/{controller=Home}/{action=Index}/{id?}");
endpoints.MapControllerRoute(
name: "Features", pattern: "
{culture=en}/{controller=Features}/{action=Features}/{id?}");
endpoints.MapControllerRoute(
name: "About", pattern: "
{culture=en}/{controller=About}/{action=About}/{id?}");
endpoints.MapControllerRoute(
name: "Help", pattern: "
{culture=en}/{controller=Help}/{action=Help}/{id?}");
endpoints.MapRazorPages();
});
Database:
There is no user record being created in the DB when register is clicked, just the error page
Update:
I searched my entire codebase for 'localhost' but did not find it anywhere other than the IIS settings.
Update:
I added the server and virtual inbound IP addresses from the nslookup to the DB server firewall whitelist.
Update:
On Firefox I do not get an error. Simply a blank white page.
On Edge I get the same 404 error that the page cannot be found.
Update:
In my startup.cs services I tried both true and false for RequireConfirmedAccount
services.AddDefaultIdentity<ApplicationUser>( options => { options.SignIn.RequireConfirmedAccount = true; }).AddEntityFrameworkStores<ApplicationDbContext>();
Update:
Confirmed that Build Action is set to Content for my cshtml properties.
Update:
Added TXT | asuid | app verification id to my DNS settings in GoDaddy.
Added TXT | # | mywebsite.azurewebsites.net to my DNS settings in GoDaddy.
Added mywebsite.com as an assigned custom domain & verified it in the azure portal.
Update:
I was told on the MSDN forums that this may be because the http POST for the submit button wont work and I should change it to a anchor <a> tag or Input type button.
Changing the html is fine, but I am trying to figure out what this will mean for my Razor page redirect code? If anyone can point me in the right direction it would be great. Existing redirect code for the register page shown below.
public async Task<IActionResult> OnPostAsync(string returnUrl = null)
{
returnUrl ??= Url.Content("~/");
ExternalLogins = (await _signInManager.GetExternalAuthenticationSchemesAsync()).ToList();
if (ModelState.IsValid)
{
var user = new ApplicationUser { UserName = Input.Email, Email = Input.Email };
var result = await _userManager.CreateAsync(user, Input.Password);
if (result.Succeeded)
{
_logger.LogInformation("User created a new account with password.");
var code = await _userManager.GenerateEmailConfirmationTokenAsync(user);
code = WebEncoders.Base64UrlEncode(Encoding.UTF8.GetBytes(code));
var callbackUrl = Url.Page(
"/Account/ConfirmEmail",
pageHandler: null,
values: new { area = "Identity", userId = user.Id, code },
protocol: Request.Scheme);
await _emailSender.SendEmailAsync(Input.Email, "Confirm your email",
$"Please confirm your account by <a href='{HtmlEncoder.Default.Encode(callbackUrl)}'>clicking here</a>.");
if (_userManager.Options.SignIn.RequireConfirmedAccount)
{
return RedirectToPage("RegisterConfirmation", new { email = Input.Email });
}
else
{
await _signInManager.SignInAsync(user, isPersistent: false);
return LocalRedirect(returnUrl);
}
}
foreach (var error in result.Errors)
{
ModelState.AddModelError(string.Empty, error.Description);
}
}
// If we got this far, something failed, redisplay form
return Page();
}
I'm guessing from a little research that my new cshtml will be something like below:
<input id="RegisterButton" runat="server" onserverclick="RegisterButtonClick" type="submit" class="btn btn-primary" asp-area="Identity" asp-page="Register" >#_loc[Model.RegisterButtonName]</input>
Update:
I commented out Use.Hsts for prod in the Configure method of my startup.cs
Update:
I tried hardcoding a returnUrl in the OnPostAsync method of my login.cshtml.cs instead of using returnUrl ??= Url.Content("~/");Same 404 error...so I'm not sure where the redirect is actually being triggered by the identity service that redirects to the same login page. Obviously not in my OnPostAsync, because it should have tried to reach the url I hardcoded instead, which was ~/myapp.com/en/Features/Features. Ugh. This is giving me serious headaches.
Update:
I tried replacing return LocalRedirect(returnUrl); with
return LocalRedirect(Url.Action("Login", "Identity/Account"));but it is not working on localhost so I have not tried it in prod. It is saying
No webpage was found for the web address: https://localhost:44305/en/Identity%2FAccount/Login
Update:
I replaced the null coalescing operators for returnUrl ??= Url.Content("~/"); with the = operator for returnUrl = Url.Content("~/");
Update:
Confirmed that my AddControllersWithViews and AddRazorPages do NOT implement authorization globally by default, and my Login and Register page models have [AllowAnonymous] specified.
Update:
I have made changes to my OnPostAsync method and my ConfigureServices<IdentityOptions>. I think the default IdentityOptions password requirements were masking the true issue.
I can still log in fine on localhost using the user I created prior to scaffolding, and I can not log in on App Service with that user. But now on AppService I am getting an, 'Invalid Login Attempt' error on the UI for that pre-scaffolding user. There is no error in the console.
So basically I still cant register or login on AppService, but somehow after 2 weeks an error message on the UI that I can try to diagnose feels like progress!
I will investigate this because it is happening with new users I register in localhost also, so it needs to be resolved first anyway. If it doesn't help, I will look into CORS as the next stop to find an AppService resolution. I also reached out to Microsoft, fingers crossed. Thanks folks.
UPDATE:
This is now resolved. I honestly have no idea how. I made so many changes over the past few weeks, to undo all my commits one by one to find out what fixed it would just be too painful. When the painful memory subsides in a few weeks I will come back and try to break it again to find out what it was. I'll post an update then.

Answer 1

Try to generate the Urls with #Url.Action("Login","Account")

Answer 2

As it was pointed out already in a comment, it could be a CORS issue.
I'd suggest, use fiddler and look at the requests your browser sends to the server.
I had a similar CORS issue just recently where the browser sent an OPTIONS request to the server before the actual POST. What worked for me except including CORS middleware and RequireCors on your endpoints was to add the HttpOptions attribute on the controller actions.
Good luck!

Answer 3

I have a similar problem.
When i run the project in VS is Ok. But when it is in IIS or web hosting, when on click register o login (request) show error 404. About Identity/Account/Login.
Error 404
My solution was remove "Trusted_Connection=True" from the connection string. I think it was an exception into login page and register page related with sql.
You can test your app in local IIS, add and page that make queries in sql
And after in web hosting. (SmarterASP.NET https://www.smarterasp.net)

Answer 4

Maybe late but i hope my answer will help someone save their time.
I face the same issue because i don't allow resources access my server on Azure, lol. I just allow Azure services and resources to access this server and everything are working fine.
Image
And after, I don't know why Azure return 404 not found page instead of show me an error message about like 'can't connect to SQl server ...'.