Show or hide login and logout links based on login status in asp.net core

Suggested Videos
Part 66 - Register new user using asp.net core identity | Text | Slides
Part 67 - ASP.NET Core Identity UserManager and SignInManager | Text | Slides
Part 68 - ASP.NET core identity password complexity | Text | Slides

In this video we will discuss

• How to show or hide LOGIN, LOGOUT and REGISTER links based on whether the user is logged in or not. 
• Implementing LOGOUT feature in ASP.NET core.

If the user is not logged-in, display Login and Register links.




If the user is logged-in, hide Login and Register links and display Logout link.



Inject SignInManager, so we could check if the user is signed-in

@using Microsoft.AspNetCore.Identity

@inject SignInManager<IdentityUser> SignInManager

<div class="collapse navbar-collapse" id="collapsibleNavbar">

    <ul class="navbar-nav ml-auto">

        @*If the user is signed-in display Logout link*@

        @if (SignInManager.IsSignedIn(User))

        {

            <li class="nav-item">

                <form method="post" asp-controller="account" asp-action="logout">

                    <button type="submit" style="width:auto"

                            class="nav-link btn btn-link py-0">

                        Logout @User.Identity.Name

                    </button>

                </form>

            </li>

        }

        else

        {

            <li class="nav-item">

                <a class="nav-link" asp-controller="account" asp-action="register">

                    Register

                </a>

            </li>

            <li class="nav-item">

                <a class="nav-link" asp-controller="account" asp-action="login">

                    Login

                </a>

            </li>

        }

    </ul>

</div>

Use a POST request to log the user out. Using a GET request to log out the user is not recommended because the approach may be abused. A malicious user may trick you into clicking an image element where the src attribute is set to the application logout url. As a result you are unknowingly logged out.

Logout user in asp.net core

public class AccountController : Controller

{

    private readonly SignInManager<IdentityUser> signInManager;

    public AccountController(SignInManager<IdentityUser> signInManager)

    {

        this.signInManager = signInManager;

    }

    [HttpPost]

    public async Task<IActionResult> Logout()

    {

        await signInManager.SignOutAsync();

        return RedirectToAction("index", "home");

    }

}