From fa8d144487d168fd213a034fb84c085e38f86d44 Mon Sep 17 00:00:00 2001 From: Joni Date: Sat, 13 Mar 2021 21:44:12 +0900 Subject: [PATCH] Update 22-to-30.md (#21778) --- aspnetcore/migration/22-to-30.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/aspnetcore/migration/22-to-30.md b/aspnetcore/migration/22-to-30.md index 3043bd4196..0e0a07b98f 100644 --- a/aspnetcore/migration/22-to-30.md +++ b/aspnetcore/migration/22-to-30.md @@ -737,7 +737,7 @@ public class HomeController : Controller } ``` -When using endpoint routing, we recommend against configuring `` and instead relying on the Authorization middleware. If the app uses an `AuthorizeFilter` as a global filter in MVC, we recommend refactoring the code to provide a policy in the call to `AddAuthorization`. +When using endpoint routing, we recommend against configuring and instead relying on the Authorization middleware. If the app uses an `AuthorizeFilter` as a global filter in MVC, we recommend refactoring the code to provide a policy in the call to `AddAuthorization`. The `DefaultPolicy` is initially configured to require authentication, so no additional configuration is required. In the following example, MVC endpoints are marked as `RequireAuthorization` so that all requests must be authorized based on the `DefaultPolicy`. However, the `HomeController` allows access without the user signing into the app due to `[AllowAnonymous]`: