Policy based authorization that needs to evaluated on the ocelot gateway project supported? #2014
gurutcr
started this conversation in
Show and tell
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I am developing a micro services based application using ocelot as API gateway. When incoming requests come to the ocelot, it will call an authentication service that will return a JWT token upon successful authentication. Now before it calls the downstream API, I need to check some things to allow that call or not. For this I think the following middleware code is needed in the ocelot startup.cs.
Now, the above middleware will call the AuthorizationHandler below before calling the downstream api.
I need to get the claims and user details from the JWT token returned by the authentication service in the above handler. Is this possible?
Beta Was this translation helpful? Give feedback.
All reactions