Class PermissionPolicyProvider

Namespace

Stratara.Identity.AspNetCore.Authorization

Assembly

Stratara.Identity.AspNetCore.dll

IAuthorizationPolicyProvider that turns every permission declared in the application's PermissionCatalog into an authorization policy on demand — so plain [Authorize("sims.read")] (or .RequireAuthorization("sims.read")) works without registering one policy per permission by hand.

public sealed class PermissionPolicyProvider : IAuthorizationPolicyProvider

Inheritance

object

PermissionPolicyProvider

Implements

IAuthorizationPolicyProvider

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.ReferenceEquals(object, object)

object.ToString()

Extension Methods

FieldChangedEventExtensions.ApplyPropertyChanged<TAggregate>(TAggregate, FieldChangedEvent<TAggregate>)

EventStream.ApplyEvents(object, IReadOnlyList<IEvent>)

Remarks

Policy names that are not declared in the catalog defer to the default provider, so conventional named policies keep working unchanged. Generated policies require an authenticated user plus the PermissionRequirement, evaluated by PermissionAuthorizationHandler against the registered IPermissionResolver.

Constructors

PermissionPolicyProvider(IOptions<AuthorizationOptions>, PermissionCatalog)

IAuthorizationPolicyProvider that turns every permission declared in the application's PermissionCatalog into an authorization policy on demand — so plain [Authorize("sims.read")] (or .RequireAuthorization("sims.read")) works without registering one policy per permission by hand.

public PermissionPolicyProvider(IOptions<AuthorizationOptions> options, PermissionCatalog catalog)

Parameters

options IOptions<AuthorizationOptions>

The host's authorization options (consumed by the fallback default provider).

catalog PermissionCatalog

The application's permission catalog.

Remarks

Policy names that are not declared in the catalog defer to the default provider, so conventional named policies keep working unchanged. Generated policies require an authenticated user plus the PermissionRequirement, evaluated by PermissionAuthorizationHandler against the registered IPermissionResolver.

Methods

GetDefaultPolicyAsync()

Gets the default authorization policy.

public Task<AuthorizationPolicy> GetDefaultPolicyAsync()

Returns

Task<AuthorizationPolicy>

The default authorization policy.

GetFallbackPolicyAsync()

Gets the fallback authorization policy.

public Task<AuthorizationPolicy?> GetFallbackPolicyAsync()

Returns

Task<AuthorizationPolicy>

The fallback authorization policy.

GetPolicyAsync(string)

Gets a AuthorizationPolicy from the given policyName

public Task<AuthorizationPolicy?> GetPolicyAsync(string policyName)

Parameters

policyName string

The policy name to retrieve.

Returns

Task<AuthorizationPolicy>

The named AuthorizationPolicy.