authorization

authorization copied to clipboard

Can I authorize per multiple policies ?

16

Using the GraphQLAuthorize attribute, can I apply multiple policies at once ... like ["Admin", "Teacher"] . Then any user that has any of those claims get authorized.

jalchr

IAuthorizationSkipCondition feature

14

Demonstration of fix for #28. @Shane32 Please review. I would like to merge after #184

sungam3r

Allow introspection to skip validation

3

I have put Authorization on my Root Query, but now "ui playground" cannot get the initial introspection query to work. I can put the bearer token in UiPlayground to make...

drowhunter

IAuthorizationRequirement is not sent the same variable names as those in IResolveField context

2

Take the following AuthorizationRequirement: namespace GraphQLNet.AuthRequirements { public class IsSelf : IAuthorizationRequirement { public Task Authorize(AuthorizationContext context) { var user = context.User; object idArg; if (context.InputVariables.TryGetValue("userID", out idArg) && user.HasClaim(c...

JRDrummond

Selectively allow anonymous access

13

Is it possible to white list one or more endpoints? for example: I would like to require authentication for all mutation and queries except for Login. Currently we authorize each...

dnndevelopernc

sungam3r

Any example for schema first auth example?

2

Hello there. I am looking for an example for schema first auth and using controller for accessing api. Could anyone provide me an example?

ooo2003003v2

Auth engine rework

2

This PR adds many new classes and interfaces to unify authorization architecture with such from the server project. Also adds APIs from https://github.com/graphql-dotnet/server/pull/480 to build custom errors and messages. Many...

sungam3r

UNAUTHENTICATED error code

3

I just need to know how to get the error code UNAUTHENTICATED because when I use .AuthorizeWith I am getting a VALIDATION_ERROR. here is a bit of startup.cs ``` services.AddAuthentication(options...

EbrahimMajdey

Updated AuthorizationValidationRule to skip authorization checks when…

6

… the field is not included or skipped due to directives.

chris-nissen