liveBook · Manning

RequireClaim

As explained in ASP.NET Core in Action, 3e

RequireClaim is an authorization policy builder method that requires a user to possess a specified claim, optionally with a specified value.

RequireClaim builds a claims-based authorization policy that succeeds when the user has a specified claim. You can also require a particular claim value. section 24.3

Require a boarding-pass claim

builder.Services.AddAuthorizationBuilder() .AddPolicy("CanEnterSecurity", policyBuilder => policyBuilder.RequireClaim("BoardingPassNumber")); Any value satisfies this policy when the user has the BoardingPassNumber claim. To require one exact value, use policyBuilder.RequireClaim("BoardingPassNumber", "A1234"). Apply the named policy with [Authorize("CanEnterSecurity")]. section 24.3

How ASP.NET Core in Action, 3e covers it

How deep it goes
Defines presence and value matching, but does not detail complex authorization requirements.
Examples
Uses BoardingPassNumber, A1234, CanEnterSecurity, and a Razor Page policy application.
What it assumes
Assumes understanding of users, claims, policies, and named Authorize attributes.
What you can do after
Apply it via AuthorizationPolicyBuilder to restrict endpoints by claim presence or value.
How it connects
Connects claims to authorization policies, AuthorizationPolicyBuilder, and the Authorize attribute.
Cover of ASP.NET Core in Action, 3e
liveBookmanning.com
Read ASP.NET Core in Action, 3e on liveBook Get the book at manning.com

Related concepts

This explainer was generated by Manning's knowledge graph from the text of ASP.NET Core in Action, 3e. The section links point to the parts of the book it draws on.