Skip to main content
Table of Contents

Namespace Stratara.Identity.AspNetCore.Authorization

Classes

PermissionAuthorizationHandler

Evaluates PermissionRequirement by resolving the caller's effective permission set through the registered IPermissionResolver — the user id comes from the principal's name-identifier claim, the tenant scope from the stratara:tenant_id claim (the one the membership sign-in bridge stamps).

PermissionPolicyProvider

IAuthorizationPolicyProvider that turns every permission declared in the application's PermissionCatalog into an authorization policy on demand — so plain [Authorize("sims.read")] (or .RequireAuthorization("sims.read")) works without registering one policy per permission by hand.

PermissionRequirement

ASP.NET Core authorization requirement carrying one Stratara permission name — the policy payload behind [Authorize("sims.read")]-style endpoint gates generated by the permission policy provider.