Skip to main content

Adding Policies ASPNET CORE Identity

Adding Policies ASPNET CORE Identity


@using Microsoft.AspNetCore.Authorization
@inject IAuthorizationService AuthorizationService

include this in viewImports.cshtml page so that this can be accessed across all cshtml pages in that solution

@{
                if ((await AuthorizationService.AuthorizeAsync(User, "AdminOnly")).Succeeded)
                {
                         <delete-confirmation confirm="deleteConfirm(dataItem)" heading="'Delete Client'" content="'All information related to client will be deleted'" item-to-delete="client"></delete-confirmation>
                 }
            }

add this in the view

____________________________________________________________

Extension method to check if a user contains any roles

using Microsoft.AspNetCore.Http;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Security.Claims;
using System.Threading.Tasks;

namespace Verisk3E.WebHub.WebApp
{
    public static class CheckUserRoles
    {
        public static bool CheckIfUserHasRoles(this ClaimsPrincipal claims, string[] roles)
        {
            try
            {
                ClaimsPrincipal principal = claims as ClaimsPrincipal;
                var x = roles.Any(i => roles.Contains(i));
                return true;
            }
            catch (Exception)
            {
                return false;
            }
           
        }
    }
}

___________________________________________________________________________

 public static class CheckUserRoles
    {
        public static bool CheckIfUserHasRoles(this ClaimsPrincipal claims, string[] roles)
        {
            try
            {
                return claims.Claims.Where(i => i.Type.Equals(ClaimTypes.Role)).Select(i => i.Value)
                    .Any(i => roles.ToList().Contains(i));
            }
            catch (Exception)
            {
                return false;
            }
         
        }
    }

Comments

Popular posts from this blog

App Role assignment to service principal --

 Using Ms Graph Rest API's Permissions One of the following permissions is required to call this API. To learn more, including how to choose permissions, see  Permissions . Permission type Permissions (from least to most privileged) Delegated (work or school account) AppRoleAssignment.ReadWrite.All and Application.Read.All, AppRoleAssignment.ReadWrite.All and Directory.Read.All, Application.ReadWrite.All, Directory.ReadWrite.All Delegated (personal Microsoft account) Not supported. Application AppRoleAssignment.ReadWrite.All and Application.Read.All, AppRoleAssignment.ReadWrite.All and Directory.Read.All, Application.ReadWrite.All, Directory.ReadWrite.All Create 2 app registrations. App role owner will contain the app role that will be assigned to a service principal. The  reader role in approleowner will be added to the approlesubscriber Setup postman to use the Oauth auth flow to get a token for MS Graph. ClientId:   Application (client) ID for approlesubscrib...

ASp.net core 3.1 identity

It is just an extension to cookie authentication. We get a UI, Tables, helper classes, two factor authentication etc. Even EF and its database constructs. So instead of writing code for all of this we can just use these in built features. Extending Default Identity Classes Add a class that inherits from    public class AppUser : IdentityUser     {         public string Behavior { get; set; }     } Also change the user type in login partial.cs under shared folder Then add migrations and update db using migrations. We can customize further.  services.AddDefaultIdentity<AppUser>(options =>              {                 options.SignIn.RequireConfirmedAccount = true;                 options.Password.RequireDigit = false;           ...

Get user groups

 string[] scopes = new string[] { "https://graph.microsoft.com/.default" };             string clientId = "";             string tenantId = "";             string secret = "";                        var options = new TokenCredentialOptions             {                 AuthorityHost = AzureAuthorityHosts.AzurePublicCloud             };             // https://learn.microsoft.com/dotnet/api/azure.identity.clientsecretcredential             try             {                 var clientSecretCredential = new ClientSecretCredential(                        ...