IdentityApplicationOptions.AllowWebApiToBeAuthorizedByACL Property
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Web APIs called on behalf of a user can validate a token based on scopes (representing delegated permissions).
Web APIs called by daemon applications can validate a token based on roles (representing app permissions).
By default, the web API will validate the presence of roles and scopes. You can set this property to false to
use the ACL-based authorization pattern for the client (daemon) to the web API. If using ACL-based authorization,
the implementation will not throw if roles or scopes are not in the Claims.
For details see https://aka.ms/ms-identity-web/daemon-ACL.
public bool AllowWebApiToBeAuthorizedByACL { get; set; }member this.AllowWebApiToBeAuthorizedByACL : bool with get, setPublic Property AllowWebApiToBeAuthorizedByACL As Boolean