Claims Saving to custom field

Question

User-183185495 posted

Ok So I managed to get my claims extrra fields into the AspnetUserClaims table my question is how do i save against those fields when am doing the following.

 await userManager.AddClaimAsync(defaultUser, new Claim("Permission","Create"));                
 await userManager.AddClaimAsync(defaultUser, new Claim("Permission","Read"));
 await userManager.AddClaimAsync(defaultUser, new Claim("Permission", "Updated"));                
 await userManager.AddClaimAsync(defaultUser, new Claim("Permission", "Delete"));

I thought I should be able to just go this but it doesnt allow me to

await userManager.AddClaimAsync(defaultUser, new Claim("Permission","Create","ControllerName", "AreaName"));                

But of course claim knows nothing about my backing fields?

This is how am creating the extra fields and why do it also create the extra discrimator field i didnt ask it to.

public  class AspNetUserClaims : IdentityUserClaim<string>
{
        public string? Controller { get; set; }
        public string? Area { get; set; }
        public string? Action { get; set; }
        public bool? isActive { get; set; }
        public string? Name { get; set; }
}

Answer 1

User475983607 posted

It looks like you used inheritance.  Create a new derived class not the base class.  The base class knows nothing about the Controller and Area fields. 

Answer 2

User-183185495 posted

Create a new derived class not the base class.

Sorry what do u mean

Answer 3

User475983607 posted

Frankly, I would use the controller or area/controller as the type.  Then you can look up the value from the route.  

Answer 4

User-183185495 posted

I suppose i could just parse it like using a - or something?

Frankly, I would use the controller or area/controller as the key.

Answer 5

User-183185495 posted

I still need the is active field as am wanting to give the user some kind of managment screen for the permissions.

Frankly, I would use the controller or area/controller as the type.  Then you can look up the value from the route.  

Answer 6

User475983607 posted

I suppose i could just parse it like using a - or something?

I don't know how your application works but it seems like you want granular control over HTTP methods.  I would use the URL (route) and HTTP verbs as the value.

Answer 7

User475983607 posted

I still need the is active field as am wanting to give the user some kind of managment screen for the permissions.

I do not understand the requirement or how it relates to a permissions screen?  Either the user has a claim (active) or does not have the claim (not active).  

I think it is important to mention this design has the potential to reach the authentication cookie maximum size.  A better approach might be a separate table to hold the authorization data.  Cache the user's authorization data during login.