C# Authorize Attribute Logic

Question

I'm trying to implement the Authorize attribute in my WebApi Controllers. I've found resources on how to implement Authorize, and even that I need to set the Thread and HttpContext Principals when implementing Authorization. But I can't find an example of how/where I write the Authorization logic.

public class MyController : ApiController
{
    [Route("")]
    [Authorize]
    public async Task<IHttpActionResult> Get() {}
}
public class MyAuthorizationProvider
{
    public void AuthorizeIGuess()
    {
        string authHeader = HttpContext.Request.Headers.GetValues("Authorization").FirstOrDefault();

        // do stuff with auth header
        // create principal

        HttpContext.Current.User = ...;
        Thread.CurrentPrincipal = ...;
    }
}

How do I setup MyAuthorizationProvider so that it is used for Authorize, and is this how I set my auth context?

Community · Accepted Answer · 2017-05-23 11:53:23Z

1

You need to inherit AuthorizeAttribute like

public class MyAuthorizationProvider : AuthorizeAttribute  
{
  //Write your validation logic here. 
}

and use this override authorization attribute like

    public class MyController : ApiController
  {
    [Route("")]
    [MyAuthorizationProvider]
    public async Task<IHttpActionResult> Get() {}
  }

When you inherit AuthorizeAttribute, it will gives you some override method to implement your logic in better way, use that also. For more details check this answer.

edited May 23, 2017 at 11:53

CommunityBot

11 silver badge

answered Feb 1, 2017 at 3:11

MANISH KUMAR CHOUDHARY

3,4823 gold badges24 silver badges34 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

micah Over a year ago

In examples where simply [Authorize] is used are those just abstract examples? Is it possible to reuse the [Authorize] attribute or is it always extended/renamed?

Collectives™ on Stack Overflow

C# Authorize Attribute Logic

1 Answer 1

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related