Namespace Cratis.Arc.Authorization
Classes
- AllowAnonymousAttribute
Specifies that the class or method that this attribute is applied to does not require authorization.
- AllowAnonymousExtensions
Extension methods for checking if anonymous access is allowed.
- AmbiguousAuthorizationLevel
The exception that is thrown when a member has conflicting authorization declarations.
- AnonymousAspNetAuthorizationPolicyRegistration
Explicitly permits anonymous evaluation of an ASP.NET Core-registered policy by name.
- AnonymousEvaluator
Represents an implementation of IAnonymousEvaluator that checks for the Cratis Arc AllowAnonymousAttribute.
- ArcAuthorizationPolicyRuntime
Evaluates native Arc policies; the standalone host cannot authenticate named schemes.
- AspNetAnonymousEvaluator
Represents an implementation of IAnonymousEvaluator that checks for ASP.NET Core's AllowAnonymousAttribute.
- AspNetAuthorizationAttributeEvaluator
Represents an implementation of IAuthorizationAttributeEvaluator that checks for ASP.NET Core's AuthorizeAttribute.
- AspNetAuthorizationPolicyRuntime
Evaluates ASP.NET Core policies and authentication schemes alongside native Arc policies.
- AspNetCoreEndpointFallbackAuthorization
Applies ASP.NET Core's fallback policy to individual queries on the anonymous query hub.
- AsynchronousAuthorizationRequired
The exception that is thrown when synchronous authorization encounters a policy or an explicit authentication scheme.
- AuthorizationAttributeEvaluator
Represents an implementation of IAuthorizationAttributeEvaluator that checks for the Cratis Arc AuthorizeAttribute.
- AuthorizationConfigurationValidator
Validates the discovered command and query authorization catalog before a listener accepts traffic.
- AuthorizationDeclaration
The effective authorization requirements on one member.
- AuthorizationDeclarations
Resolves explicit authorization declarations before consulting baseline fallback evaluators.
- AuthorizationEvaluation
Applies asynchronous policy and scheme requirements without replacing legacy evaluator verdicts.
- AuthorizationEvaluator
Evaluates authentication and roles declared on a type or method. Policy-bearing declarations require the asynchronous pipeline.
- AuthorizationIdentityChanged
The exception that is thrown when an asynchronous authorization verdict no longer certifies the execution caller.
- AuthorizationPolicyContext
The caller and resource presented to an authorization policy.
- AuthorizationPolicyRegistration
A named policy type, resolved from the executing scope rather than captured at discovery.
- AuthorizationPolicyServiceCollectionExtensions
Registers host-neutral policies on either Arc host.
- AuthorizationPrincipalScope
Keeps the authenticated scheme identity and tenant visible throughout authorized command or query execution.
- AuthorizationRequirement
Represents one authorization requirement declared on a type or method: the caller must be authenticated and, when roles are given, hold at least one of them.
- AuthorizationResult
Result of an authorization evaluation.
- AuthorizationStartupValidation
Validates the authorization catalog in the host's pre-start phase, before any web listener starts.
- AuthorizeAttribute
Specifies that the class or method that this attribute is applied to requires authorization.
- CurrentPrincipalAccessor
Represents an implementation of ICurrentPrincipalAccessor and ICurrentPrincipalOverride that resolves the current principal from the HTTP request when one is in progress, falling back to a server-side override otherwise.
- InvalidAuthorizationConfiguration
The exception that is thrown when a named policy or authentication scheme cannot be resolved unambiguously.
- RolesAttribute
Represents an AuthorizeAttribute for specifying roles.
- SystemExecution
Represents an implementation of ISystemExecution that establishes the server-side principal through the ICurrentPrincipalOverride.
- SystemPrincipal
Builds the ClaimsPrincipal used to represent a trusted system actor.
Interfaces
- IAnonymousEvaluator
Defines a system that can evaluate if anonymous access is allowed for a type or method.
- IAuthorizationAttributeEvaluator
Defines a system that can evaluate authorization attributes for a type or method.
- IAuthorizationEmissionRuntime
Isolates native host context during observable query emissions, including after the admission request is gone.
- IAuthorizationEvaluator
Defines a contract for performing authorization checks.
- IAuthorizationPolicy
A host-neutral, named asynchronous authorization policy.
- IAuthorizationPolicyResolution
A single operation's resolved policies and authentication schemes, held only for the duration of admission.
- IAuthorizationPolicyRuntime
Resolves policy and authentication scheme requirements for the active host.
- IAuthorizationRequestContext
Provides an operation-local Arc request identity without writing to a shared native HTTP context.
- ICurrentPrincipalAccessor
Defines a system for accessing the principal that is currently executing, independent of transport.
- ICurrentPrincipalOverride
Defines a system for overriding the current principal for server-side execution.
- IFallbackAuthorizationEvaluator
Supplies baseline authorization requirements when a command type or query target has no explicit authorization declaration.
- IResourceFreeRequirement
Marks an authorization requirement whose handlers only read the user and never read the resource.
- ISystemExecution
Defines a system for executing commands from server-side / background code as a trusted system actor.