Beware the combined authorize filter mechanics in ASP.NET Core 2.1
Read OriginalThis technical article details a significant change in ASP.NET Core 2.1's authorization filter mechanics. Previously, multiple filters ran independently, requiring all specified authentication schemes. In 2.1, filters can combine, merging claims from different schemes and potentially relaxing security requirements, which developers must understand to avoid unintended access.
Comments
No comments yet
Be the first to share your thoughts!
Browser Extension
Get instant access to AllDevBlogs from your browser