Microsoft.AspNetCore.Authorization

Specifies that the class or method that this attribute is applied to does not require authorization.

Implements an and that takes a user specified assertion.

Function that is called to handle this requirement.

Creates a new instance of .

Function that is called to handle this requirement.

Creates a new instance of .

Function that is called to handle this requirement.

Calls to see if authorization is allowed.

The authorization information.

Implements an and which requires at least one instance of the specified claim type, and, if allowed values are specified, the claim value must be any of the allowed values.

Creates a new instance of .

The claim type that must be present. The optional list of claim values, which, if present, the claim must match.

Gets the claim type that must be present.

Gets the optional list of claim values, which, if present, the claim must match.

Makes a decision if authorization is allowed based on the claims requirements specified.

The authorization context. The requirement to evaluate.

Implements an and which requires the current user must be authenticated.

Makes a decision if authorization is allowed based on a specific requirement.

The authorization context. The requirement to evaluate.

Implements an and which requires the current user name must match the specified value.

Constructs a new instance of .

The required name that the current user must have.

Gets the required name that the current user must have.

Makes a decision if authorization is allowed based on a specific requirement.

The authorization context. The requirement to evaluate.

A helper class to provide a useful which contains a name.

The name of this instance of .

Infrastructure class which allows an to be its own .

Makes a decision if authorization is allowed.

The authorization context.

Implements an and which requires at least one role claim whose value must be any of the allowed roles.

Creates a new instance of .

A collection of allowed roles.

Gets the collection of allowed roles.

Makes a decision if authorization is allowed based on a specific requirement.

The authorization context. The requirement to evaluate.

Encapsulates a failure result of .

Failure was due to being called.

Failure was due to these requirements not being met via .

Return a failure due to being called.

The failure.

Return a failure due to some requirements not being met via .

The requirements that were not met. The failure.

Base class for authorization handlers that need to be called for a specific requirement type.

The type of the requirement to handle.

Makes a decision if authorization is allowed.

The authorization context.

Makes a decision if authorization is allowed based on a specific requirement.

The authorization context. The requirement to evaluate.

Base class for authorization handlers that need to be called for specific requirement and resource types.

The type of the requirement to evaluate. The type of the resource to evaluate.

Makes a decision if authorization is allowed.

The authorization context.

Makes a decision if authorization is allowed based on a specific requirement and resource.

The authorization context. The requirement to evaluate. The resource to evaluate.

Contains authorization information used by .

Creates a new instance of .

A collection of all the for the current authorization action. A representing the current user. An optional resource to evaluate the against.

The collection of all the for the current authorization action.

The representing the current user.

The optional resource to evaluate the against.

Gets the requirements that have not yet been marked as succeeded.

Flag indicating whether the current authorization processing has failed.

Flag indicating whether the current authorization processing has succeeded.

Called to indicate will never return true, even if all requirements are met.

Called to mark the specified as being successfully evaluated.

The requirement whose evaluation has succeeded.

Provides programmatic configuration used by and .

Determines whether authentication handlers should be invoked after a failure. Defaults to true.

Gets or sets the default authorization policy. Defaults to require authenticated users.

The default policy used when evaluating with no policy name specified.

Gets or sets the fallback authorization policy used by when no IAuthorizeData have been provided. As a result, the AuthorizationMiddleware uses the fallback policy if there are no instances for a resource. If a resource has any then they are evaluated instead of the fallback policy. By default the fallback policy is null, and usually will have no effect unless you have the AuthorizationMiddleware in your pipeline. It is not used in any way by the default .

Add an authorization policy with the provided name.

The name of the policy. The authorization policy.

Add a policy that is built from a delegate with the provided name.

The name of the policy. The delegate that will be used to build the policy.

Returns the policy for the specified name, or null if a policy with the name does not exist.

The name of the policy to return. The policy for the specified name, or null if a policy with the name does not exist.

Represents a collection of authorization requirements and the scheme or schemes they are evaluated against, all of which must succeed for authorization to succeed.

Creates a new instance of .

The list of s which must succeed for this policy to be successful. The authentication schemes the are evaluated against.

Gets a readonly list of s which must succeed for this policy to be successful.

Gets a readonly list of the authentication schemes the are evaluated against.

Combines the specified into a single policy.

The authorization policies to combine. A new which represents the combination of the specified .

Combines the specified into a single policy.

The authorization policies to combine. A new which represents the combination of the specified .

Combines the provided by the specified .

A which provides the policies to combine. A collection of authorization data used to apply authorization to a resource. A new which represents the combination of the authorization policies provided by the specified .

Used for building policies.

Creates a new instance of

An array of authentication schemes the policy should be evaluated against.

Creates a new instance of .

The to copy.

Gets or sets a list of s which must succeed for this policy to be successful.

Gets or sets a list authentication schemes the are evaluated against. When not specified, the requirements are evaluated against default schemes.

Adds the specified authentication to the for this instance.

The schemes to add. A reference to this instance after the operation has completed.

Adds the specified to the for this instance.

The authorization requirements to add. A reference to this instance after the operation has completed.

Combines the specified into the current instance.

The to combine. A reference to this instance after the operation has completed.

Adds a to the current instance which requires that the current user has the specified claim and that the claim value must be one of the allowed values.

The claim type required. Values the claim must process one or more of for evaluation to succeed. A reference to this instance after the operation has completed.

Adds a to the current instance which requires that the current user has the specified claim and that the claim value must be one of the allowed values.

The claim type required. Values the claim must process one or more of for evaluation to succeed. A reference to this instance after the operation has completed.

Adds a to the current instance which requires that the current user has the specified claim.

The claim type required, with no restrictions on claim value. A reference to this instance after the operation has completed.

Adds a to the current instance which enforces that the current user must have at least one of the specified roles.

The allowed roles. A reference to this instance after the operation has completed.

Adds a to the current instance which enforces that the current user must have at least one of the specified roles.

The allowed roles. A reference to this instance after the operation has completed.

Adds a to the current instance which enforces that the current user matches the specified name.

The user name the current user must possess. A reference to this instance after the operation has completed.

Adds to the current instance which enforces that the current user is authenticated.

A reference to this instance after the operation has completed.

Adds an to the current instance.

The handler to evaluate during authorization. A reference to this instance after the operation has completed.

Adds an to the current instance.

The handler to evaluate during authorization. A reference to this instance after the operation has completed.

Builds a new from the requirements in this instance.

A new built from the requirements in this instance.

Encapsulates the result of .

True if authorization was successful.

Contains information about why authorization failed.

Returns a successful result.

A successful result.

Creates a failed authorization result.

Contains information about why authorization failed. The .

Creates a failed authorization result.

The .

Extension methods for .

Checks if a user meets a specific requirement for the specified resource

The providing authorization. The user to evaluate the policy against. The resource to evaluate the policy against. The requirement to evaluate the policy against. A flag indicating whether requirement evaluation has succeeded or failed. This value is true when the user fulfills the policy, otherwise false.

Checks if a user meets a specific authorization policy against the specified resource.

The providing authorization. The user to evaluate the policy against. The resource to evaluate the policy against. The policy to evaluate. A flag indicating whether policy evaluation has succeeded or failed. This value is true when the user fulfills the policy, otherwise false.

Checks if a user meets a specific authorization policy against the specified resource.

The providing authorization. The user to evaluate the policy against. The policy to evaluate. A flag indicating whether policy evaluation has succeeded or failed. This value is true when the user fulfills the policy, otherwise false.

Checks if a user meets a specific authorization policy against the specified resource.

The providing authorization. The user to evaluate the policy against. The name of the policy to evaluate. A flag indicating whether policy evaluation has succeeded or failed. This value is true when the user fulfills the policy, otherwise false.

Specifies that the class or method that this attribute is applied to requires the specified authorization.

Initializes a new instance of the class.

Initializes a new instance of the class with the specified policy.

The name of the policy to require for authorization.

Gets or sets the policy name that determines access to the resource.

Gets or sets a comma delimited list of roles that are allowed to access the resource.

Gets or sets a comma delimited list of schemes from which user information is constructed.

Determines whether an authorization request was successful or not.

Determines whether the authorization result was successful or not.

The authorization information. The .

A type used to provide a used for authorization.

Creates a used for authorization.

The requirements to evaluate. The user to evaluate the requirements against. An optional resource the policy should be checked with. If a resource is not required for policy evaluation you may pass null as the value. The .

The default implementation of a handler provider, which provides the s for an authorization request.

Creates a new instance of .

The s.

The default implementation of a policy provider, which provides a for a particular name.

Creates a new instance of .

The options used to configure this instance.

Gets the default authorization policy.

The default authorization policy.

Gets the fallback authorization policy.

The fallback authorization policy.

Gets a from the given

The policy name to retrieve. The named .

The default implementation of an .

Creates a new instance of .

The used to provide policies. The handlers used to fulfill s. The logger used to log messages, warnings and errors. The used to create the context to handle the authorization. The used to determine if authorization was successful. The used.

Checks if a user meets a specific set of requirements for the specified resource.

The user to evaluate the requirements against. The resource to evaluate the requirements against. The requirements to evaluate. A flag indicating whether authorization has succeeded. This value is true when the user fulfills the policy otherwise false.

Checks if a user meets a specific authorization policy.

The user to check the policy against. The resource the policy should be checked with. The name of the policy to check against a specific context. A flag indicating whether authorization has succeeded. This value is true when the user fulfills the policy otherwise false.

Determines whether an authorization request was successful or not.

Determines whether the authorization result was successful or not.

The authorization information. The .

Classes implementing this interface are able to make a decision if authorization is allowed.

Makes a decision if authorization is allowed.

The authorization information.

A type used to provide a used for authorization.

Creates a used for authorization.

A type which can provide the s for an authorization request.

Return the handlers that will be called for the authorization request.

The . The list of handlers.

A type which can provide a for a particular name.

Gets a from the given

The policy name to retrieve. The named .

Gets the default authorization policy.

The default authorization policy.

Gets the fallback authorization policy.

The fallback authorization policy.

Represents an authorization requirement.

Checks policy based permissions for a user

Checks if a user meets a specific set of requirements for the specified resource

The user to evaluate the requirements against. An optional resource the policy should be checked with. If a resource is not required for policy evaluation you may pass null as the value. The requirements to evaluate. A flag indicating whether authorization has succeeded. This value is true when the user fulfills the policy; otherwise false. Resource is an optional parameter and may be null. Please ensure that you check it is not null before acting upon it.

Checks if a user meets a specific authorization policy

The user to check the policy against. An optional resource the policy should be checked with. If a resource is not required for policy evaluation you may pass null as the value. The name of the policy to check against a specific context. A flag indicating whether authorization has succeeded. Returns a flag indicating whether the user, and optional resource has fulfilled the policy. true when the policy has been fulfilled; otherwise false. Resource is an optional parameter and may be null. Please ensure that you check it is not null before acting upon it.

AuthorizationPolicy must have at least one requirement.

The AuthorizationPolicy named: '{0}' was not found.

At least one role must be specified.

Extension methods for setting up authorization services in an .

Adds authorization services to the specified .

The to add services to. The so that additional calls can be chained.

Adds authorization services to the specified .

The to add services to. An action delegate to configure the provided . The so that additional calls can be chained.