Resources with [AllowAnonymous] may trigger request to the IDP

[ckuetbach]

Resources with [AllowAnonymous] may trigger request to the IDP

d-velop/dvelop-app-template-cs#51

[ckuetbach]

Seems as if a asp dotnet core middleware cannot get the ActionDescriptor in dotnet core 2.1

In dotnet 3.1 it can be accessed from the HttpContext

Endpoint endpoint = context.GetEndpoint();
AllowAnonymousAttribute anon = endpoint.Metadata.GetMetadata<AllowAnonymousAttribute>();
if(anon != null) --> ignore IDP

May be there is another Solution.