Why does my Authorize Attribute not work ?, Authorizeattribute

Why does my Authorize Attribute not work ?, Authorizeattribute

The roles ofClaimsPrincipalAre actually just claims create with a typeClaimsIdentity.RoleClaimType. By default, this is givenClaimType.Role, Which is the stringhttp://schemas.microsoft.com/ws/2008/06/identity/claims. When a user is authenticated appropriate claims are added for their roles which can be found later as required.

It's worth bearing this in mind if you have difficultAuthorizeAttributesNot working. Most external identity providers will use a different set of claims representing role, name etc that do not marry up with the values used by Microsoft inClaimTypeClass. as Dominick Baier discusses on his blog, this can lead to situations where claims are not translated and so users can appear to not be in a given role. if you run into issues where your authorisation does not appear to working correctly, I stronugly recommend you check out his post for all the details.

 

Http://andrewlock.net/introduction-to-authorisation-in-asp-net-core/

Https://leastprivilege.com/2016/08/21/why-does-my-authorize-attribute-not-work/