共用方式為

RequiredScopeOrAppPermissionAttribute Class

  • Reference

Definition

Namespace:
Microsoft.Identity.Web.Resource
Assembly:
Microsoft.Identity.Web.dll
Package:
Microsoft.Identity.Web v3.4.0

This attribute is used on a controller, pages, or controller actions to declare (and validate) the scopes or app permissions required by a web API. These scopes or app permissions can be declared in two ways: hardcoding them, or declaring them in the configuration. Depending on your choice, use either one or the other of the constructors. For details, see https://aka.ms/ms-id-web/required-scope-or-app-permissions-attribute.

[System.AttributeUsage(System.AttributeTargets.Class | System.AttributeTargets.Method)]
public class RequiredScopeOrAppPermissionAttribute : Attribute, Microsoft.Identity.Web.IAuthRequiredScopeOrAppPermissionMetadata
[<System.AttributeUsage(System.AttributeTargets.Class | System.AttributeTargets.Method)>]
type RequiredScopeOrAppPermissionAttribute = class
    inherit Attribute
    interface IAuthRequiredScopeOrAppPermissionMetadata
Public Class RequiredScopeOrAppPermissionAttribute
Inherits Attribute
Implements IAuthRequiredScopeOrAppPermissionMetadata
Inheritance
Attribute
RequiredScopeOrAppPermissionAttribute
Attributes
AttributeUsageAttribute
Implements
IAuthRequiredScopeOrAppPermissionMetadata

Constructors

RequiredScopeOrAppPermissionAttribute()

Default constructor.
RequiredScopeOrAppPermissionAttribute(String[], String[])

Verifies that the web API is called with the right app permissions. If the token obtained for this API is on behalf of the authenticated user does not have any of these acceptedScopes in its scope claim, nor acceptedAppPermissions in its roles claim, the method updates the HTTP response providing a status code 403 (Forbidden) and writes to the response body a message telling which scopes are expected in the token.

Properties

AcceptedAppPermission

App permissions accepted by this web API. App permissions appear in the roles claim of the token.
AcceptedScope

Scopes accepted by this web API.
RequiredAppPermissionsConfigurationKey

Fully qualified name of the configuration key containing the required app permissions (separated by spaces).
RequiredScopesConfigurationKey

Fully qualified name of the configuration key containing the required scopes (separated by spaces).

Applies to