ASP.NET Identity "Role-based" Claims

c# asp.net-web-api2 asp.net-identity claims-based-identity asp.net-authentication
Dave New picture Dave New · Feb 9, 2015 · Viewed 25.3k times · Source

I understand that I can use claims to make statements about a user:

var claims = new List<Claim>();
claims.Add(new Claim(ClaimTypes.Name, "Peter"));
claims.Add(new Claim(ClaimTypes.Email, "[email protected]"));

But how should I store "role-based" claims? For example:

The user is a super administrator.

claims.Add(new Claim("IsSuperAdmin, "true"));

The value parameter "true" feels completely redundant. How else can this statement be expressed using claims?

Answer

trailmax picture trailmax · Feb 9, 2015

This is already done for you by the framework. When user is logged in, all user roles are added as claims with claims type being ClaimTypes.Role and values are role name.

And when you execute IPrincipal.IsInRole("SuperAdmin") the framework actually checks if the claim with type ClaimTypes.Role and value SuperAdmin is present on the user.

So don't need to do anything special. Just add a user to a role.

Related questions

No MediaTypeFormatter is available to read an object of type 'Advertisement' in asp.net web api

I have a class that name is Advertisement: public class Advertisement { public string Title { get; set; } public string Desc { get; set; } } and in my controller: public class OrderController : ApiController { public UserManager<IdentityUser> UserManager { get; private set; } // Post api/…

Read More
Always receiving 'invalid_client' error when POSTing to /Token endpoint with ASP Identity 2

About a month ago I had a project working perfectly with ASP Identity OAuth. I'd send a POST request to the /Token endpoint with grant_type, username, and password, and all was dandy. I recently started a new project based …

Read More
No connection could be made because the target machine actively refused it?

Sometimes I get the following error while I was doing HttpWebRequest to a WebService. I copied my code below too. System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: No connection could be …

Read More