3 ms·
Claims based authentication and authorization is all the rage.
by jlhim 11y ago
Claims based authentication and authorization is all the rage.
- keth 11y agoOh, the system that will be used in .net mvc? So far I've only seen that permissions and roles can be modeled with claims, but could that not lead to the same problem like with roles (e.g user.hasClaim("foo") || user.hasClaim("bar") || ...)?
- talles 11y agoFor ASP.NET MVC I use to roll my own AuthorizeAttribute (just inherit it and overload OnAuthorization). I avoid dealing with IIdentity and IPrincipal, I find it sorta messy. Looks like things are different on vNext though: http://docs.asp.net/en/latest/security/authorization/index.html http://docs.asp.net/en/latest/security/authorization/index.h...