identityserver3 - subdivide web api authorization in machine to machine scenario -


i need advice coming proper configuration scenario using identiyserver.

the scenario machine machine communication. single web api divided 2 parts. 1 part allows notifications posted (write). second allows information queried (read).

i envision protecting endpoints [authorize("write")] , [authorize("read")]. can tell, scopes api wide... if can used clarify access in way, haven't figured out... or simple brain.

suggestions?

scopes can used @ finer grained level app wide. normal claims check in api scope require api.

perhaps work: https://github.com/identitymodel/thinktecture.identitymodel/blob/master/source/webapi.scopeauthorization/scopeauthorizeattribute.cs


Comments

Popular posts from this blog

html - Styling progress bar with inline style -

java - Oracle Sql developer error: could not install some modules -

How to use autoclose brackets in Jupyter notebook? -