Custom Authorization and Policy-Based Authorization in ASP.NET Core

[@CodeMaze]

Thank you all for watching and for your support. ►► If you want to check out all our courses you can do that here: courses.code-maze.com/courses/

[@woudjee2]

Thank you for the video. It was not exactly what I was looking for, but it helped me significantly in my search to what I need :D

[@CodeMaze]

Hi. That's great to hear. I am sure I can't answer all the questions in a single video, but if it can help you or anyone else with their search and further learning, I am more than happy with it :)

[@woudjee2]

@@CodeMaze that is exactly what you did, thank you kindly!

[@10Totti]

Your videos are always amazing!

[@CodeMaze]

Thank you so much! Glad you like the videos.

[@ghkpr]

Thanks, just what I needed!

[@CodeMaze]

I'm glad the video was helpful. Thanks for watching.

[@imtiazdahar8451]

Thanks for video. I have an assignment that Roles must be dynamic, means that in [Authorize(Roles = "Admin")] must not be constant, it can vary and dynamic (could be changed on runtime rather than putting hardcoded). How can I get list of roles for the user who is accessing the controller/action to check wether he/she is allowed to access or not. How can I achieve this, can you guide me or make a video on this? I would be very thankful.

[@CodeMaze]

Hi. For your use case, you have to use claims and policies. When you have a kind of complex authorization logic with roles, you can't do that simply using the fixed attribute values. The policies will allow you a lot of flexibility and a custom code. Even though my video: kzbin.info/www/bejne/oorZd2lpiNuGack doesn't cover your specific use case, maybe it can help you to get the global picture of how you can do it.

[@litontonaton]

do you have github link for this example ?

[@CodeMaze]

Hi. I don't have a Github link but the source code is part of the Patreon support program with other benefits.

[@shahabjoon201]

Dear Marinko, Thanks for sharing this useful concept, the question is, is it a good practice to implement this concept inside the CodeMaze structure? Thanks in advance.

[@CodeMaze]

Hi. Yes, it is. If you need a custom authorization logic for any .NET project, you can use this solution.