claims

MVC5 Claims version of the Authorize attribute

I ended up just writing a simple attribute to handle it. I couldn’t find anything in the framework right out of the box without a bunch of extra config. Listed below. public class ClaimsAuthorizeAttribute : AuthorizeAttribute { private string claimType; private string claimValue; public ClaimsAuthorizeAttribute(string type, string value) { this.claimType = type; this.claimValue = value; … Read more

Is claims based authorization appropriate for individual resources

When you are talking about roles and permissions then you are talking about authorization. Claims are typically not for authorization. (Identity)Claims are there to model the identity of the user: who is the user? The claims on itself do not tell anything about authorization. A user can have a role claim, but this doesn’t tell … Read more