Define central claims transformation point about security HOT 5 CLOSED

yay ;)

from security.

@leastprivilege Any recommendations for the lowest-common-denominator claims transformer? Action<ClaimsIdentity>?

from security.

ClaimsPrincipal rather - you want the transformer to have a look at all identities and be able to create a completely new principal -

see here: https://github.com/thinktecture/Thinktecture.IdentityModel/blob/master/source/Thinktecture.IdentityModel.Owin.ClaimsTransformation/ClaimsTransformationOptions.cs

from security.

I agree we need a single point to evaluate what the 'user' should look like when all of the AuthenticationMiddleware (s) have completed. Since the ISecurityTokenValidator returns a ClaimsPrincipal and is configurable by the user, we need to maintain the object the user returned.

The AuthenticationHandler returns an AuthenticationTicket, if this is preserved and accessible then this would allow complete extensibility.

from security.

Discussed as part of the AuthN changes, going to go with a ClaimsTransformationMiddleware which uses a ClaimsTransformationOptions to:

1: Apply transformation to the HttpContext.User as part of the pipeline
2. Also hooks any calls to HttpContext.AuthenticateAsync to apply transformation before returning the resultant identity

from security.