Identityserver4: Control resource actions access by scope

Created on 31 Aug 2016  路  5Comments  路  Source: IdentityServer/IdentityServer4

Hi!
Is there any way I can specify that, for instance, a

  • GET http:/myserver/mypath requires scope X and
  • GET http:/myserver/myOtherpath requires scope Y
    ?
    Is there some scope attribute or can I access that stuff from within the controller?
question
Source
picture vhe1
👍1

Most helpful comment

You'd have to build that yourself. You might be able to use the new policy based authorization: https://docs.asp.net/en/latest/security/authorization/claims.html

picture brockallen on 31 Aug 2016
👍2

All 5 comments

You'd have to build that yourself. You might be able to use the new policy based authorization: https://docs.asp.net/en/latest/security/authorization/claims.html

brockallen picture brockallen on 31 Aug 2016
👍2

Thanks a lot!
That's it.

vhe1 picture vhe1 on 31 Aug 2016

What is the point of AllowedScopes if you can't limit controllers to scopes without writing another framework? Please someone tell me.

needo2 picture needo2 on 11 Jun 2019

Take a look at this as it might help, https://github.com/IdentityServer/IdentityServer4/issues/1786

maxtsw picture maxtsw on 12 Jun 2019

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

lock[bot] picture lock[bot] on 11 Jan 2020
Was this page helpful?
0 / 5 - 0 ratings

Related issues

osudude picture osudude  路  3Comments
nukec picture nukec  路  3Comments
brockallen picture brockallen  路  3Comments
krgm03 picture krgm03  路  3Comments
cixonline picture cixonline  路  3Comments