RequestFeature

Namespace: ASPSecurityKit
Assembly: ASPSecurityKit.dll

Summary

Enumerates various security features that can be enabled on requests.

Members

Disabled

Summary

Indicates that the requested operation is disabled.

Anonymous

Summary

Indicates that the requested operation is accessible anonymously (without authentication).

Public

Summary

Indicates that the requested operation is accessible using public keys.

MFANotRequired

Summary

Indicates that the requested operation does not require multi-factor authentication checks performed by IMultiFactorProvider.

VerificationNotRequired

Summary

Indicates that the requested operation does not require verification (email/mobile/etc.).

AuthorizationNotRequired

Summary

Indicates that the requested operation does not require any authorization check (including ADA, password-expiration, MFA enforcement, user verification and so on, as performed by IsAuthorized).

ActivityAuthorizationNotRequired

Summary

Indicates that the requested operation does not require activity-data authorization (ADA) checks performed by IsPermitted.

PossessesPermissionCheckOnly

Summary

Indicates that the authenticated identity only needs to possess a permission for the requested operation regardless of whichever resource/record id such a permission has been granted against.

HmacTokenInQueryString

Summary

Indicates that the HMAC token can be embedded in the query string for the requested operation.

ServiceHmacToken

Summary

Indicates that the ServiceHMAC token is allowed to authenticate the requested operation.

AuthCookie

Summary

Indicates that the AuthCookie is allowed to authenticate the requested operation.

ServiceKey

Summary

Indicates that the ServiceKey is allowed to authenticate the requested operation.

ExcludeBodyFromHmac

Summary

Indicates that the request body shouldn’t be considered for computing the HMAC for the requested operation. Useful for upload operations, for example.

AllowPasswordExpired

Summary

Indicates that the requested operation can be executed even though password has expired. Can be used to allow changePassword operation at minimum as user is required to change the password before continuing with other operations.

AllowImpersonation

Summary

Indicates that the requested operation can be executed during impersonation.

MFASetting

Summary

Indicates that the requested operation is related to configuring multi-factor authentication and hence MFA enforcement check shouldn’t be applied on it.

AllowSuspendedUser

Summary

Indicates that the requested operation can be executed even though user is suspended.