Lets say i have a razor page where i use a simple @if(SimpleAuth.IsAdmin) to show it if the user is an admin.
@inject SimpleAuth SimpleAuth@if(SimpleAuth.IsAdmin) {<p>protected content</p>}I have the SimpleAuth.cs handling the authentication which will set
public bool IsAdmin {get; private set;} = false;based on some authentication mechanism.
I add the SimpleAuth service as
builder.Services.AddScoped<SimpleAuth>();Provided this is a blazor server project can this be bypassed by the client without say having a flaw in the auth mechanism itself ?