Blazor WASM并仅在经过身份验证时返回图像

// Startup.cs
public void ConfigureServices(IServiceCollection services)
{
    services.AddRazorPages();
    services.AddAuthentication(options =>
    {
        options.DefaultAuthenticateScheme = "Cookies";
        options.DefaultChallengeScheme = "Cookies";
    })
    .AddCookie("Cookies", options =>
    {
        options.LoginPath = "/Login";
    });
}

public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
{
    if (env.IsDevelopment())
    {
        app.UseDeveloperExceptionPage();
    }
    else
    {
        app.UseExceptionHandler("/Error");
        app.UseHsts();
    }

    app.UseHttpsRedirection();
    app.UseStaticFiles();

    app.UseRouting();

    app.UseAuthentication();
    app.UseAuthorization();

    app.UseEndpoints(endpoints =>
    {
        endpoints.MapRazorPages();
        endpoints.MapGet("/api/images/{imageName}", async (HttpContext context, string imageName) =>
        {
            if (!context.User.Identity.IsAuthenticated)
            {
                context.Response.StatusCode = StatusCodes.Status401Unauthorized;
                return;
            }

            // 授权检查
            if (!await IsAuthorizedAsync(context.User, imageName))
            {
                context.Response.StatusCode = StatusCodes.Status403Forbidden;
                return;
            }

            // 返回图像
            var imagePath = Path.Combine("Images", imageName);
            if (File.Exists(imagePath))
            {
                context.Response.ContentType = "image/jpeg"; // 根据图像类型设置
                await File.OpenRead(imagePath).CopyToAsync(context.Response.Body);
            }
            else
            {
                context.Response.StatusCode = StatusCodes.Status404NotFound;
            }
        });
    });
}

private async Task<bool> IsAuthorizedAsync(ClaimsPrincipal user, string imageName)
{
    // 实现授权逻辑，例如检查用户角色或权限
    return true; // 示例中始终返回 true
}