AuthorizationContext Class

Definition

Namespace:

System.IdentityModel.Policy

Assembly:

System.ServiceModel.Primitives.dll

Package:

System.ServiceModel.Primitives v8.1.1

Source:

AuthorizationContext.cs

The result of evaluating all authorization policies available from the tokens in the sent message and by calling the GetAuthorizationPolicies(OperationContext) method.

C#

public abstract class AuthorizationContext : System.IdentityModel.Policy.IAuthorizationComponent

Inheritance

Object

AuthorizationContext

Implements

IAuthorizationComponent

Examples

C#

protected override bool CheckAccessCore(OperationContext operationContext)
{
    // Extract the action URI from the OperationContext. Match this against the claims
    // in the AuthorizationContext.
    string action = operationContext.RequestContext.RequestMessage.Headers.Action;
    Console.WriteLine("action: {0}", action);

    // Iterate through the various claim sets in the AuthorizationContext.
    foreach (ClaimSet cs in operationContext.ServiceSecurityContext.AuthorizationContext.ClaimSets)
    {
        // Examine only those claim sets issued by System.
        if (cs.Issuer == ClaimSet.System)
        {
            // Iterate through claims of type "http://example.org/claims/allowedoperation".
            foreach (Claim c in cs.FindClaims("http://example.org/claims/allowedoperation", Rights.PossessProperty))
            {
                // Write the Claim resource to the console.
                Console.WriteLine("resource: {0}", c.Resource.ToString());

                // If the Claim resource matches the action URI then return true to allow access.
                if (action == c.Resource.ToString())
                    return true;
            }
        }
    }

    // If this point is reached, return false to deny access.
    return false;
}

Remarks

Evaluating all of the authorization policies in an authorization manager results in a set of ClaimSet objects. These objects make up an authorization context.

An authorization context contains a set of claim set objects, an expiration time that specifies the span of time during which the authorization context is valid, and a unique identifier.

The AuthorizationContext for the current operation can be accessed via the AuthorizationContext property.

Constructors

AuthorizationContext()

Initializes a new instance of the AuthorizationContext class.

Properties

ClaimSets	Gets the set of claims associated with an authorization policy.
ExpirationTime	Gets the date and time at which this AuthorizationContext object is no longer valid.
Id	Gets a unique identifier for this AuthorizationContext object.
Properties	Gets a collection of non-claim properties associated with this AuthorizationContext object.

Methods

CreateDefaultAuthorizationContext(IList<IAuthorizationPolicy>)

Evaluate all of the specified authorization policies and create an AuthorizationContext.

Applies to