Enterprise Application Architecture with .NET Core

How authorization works

Authorization is done after authentication and it used to protect resources from the user that are not permissible. In ASP.NET Core, we can check and protect the user for accessing any resource by calling the User.Identity.IsAuthentication property that returns a Boolean value. True indicates that the user is authenticated.

By writing the following code in our ManageUsers action method in the MVC controller it will check if the user is already authenticated, otherwise returns the ChallengeResult, that redirects the user to the access denied page as configured in the authentication middleware:

    public IActionResult ManageUsers()     {       if (User.Identity.IsAuthenticated == false)       {         return new ChallengeResult();       }  return ...