Access User's Claims from Inside a Mutation? about authorization HOT 5 CLOSED

You should have some code that looks something like the following, to populate the User on your UserContext class.

    var settings = new GraphQLSettings
    {
        BuildUserContext = ctx =>
        {
            var userContext = new GraphQLUserContext
            {
                User = ctx.User // <--- this populates the User on your UserContext class from HttpContext
            };

            return Task.FromResult(userContext);
        }
    };

public class GraphQLUserContext : IProvideClaimsPrincipal
{
    public ClaimsPrincipal User { get; set; }
}

public class GraphQLSettings
{
    public Func<HttpContext, Task<object>> BuildUserContext { get; set; }
}

How are you building and passing your UserContext to the GraphQL Engine?

from authorization.

You should have some code that looks something like the following, to populate the User on your UserContext class.

    var settings = new GraphQLSettings
    {
        BuildUserContext = ctx =>
        {
            var userContext = new GraphQLUserContext
            {
                User = ctx.User // <--- this populates the User on your UserContext class from HttpContext
            };

            return Task.FromResult(userContext);
        }
    };

public class GraphQLUserContext : IProvideClaimsPrincipal
{
    public ClaimsPrincipal User { get; set; }
}

public class GraphQLSettings
{
    public Func<HttpContext, Task<object>> BuildUserContext { get; set; }
}

How are you building and passing your UserContext to the GraphQL Engine?

I was looking at this example: https://github.com/graphql-dotnet/authorization/blob/master/src/Harness/Startup.cs

from authorization.

If you’re using that example then it should be working...

from authorization.

If you’re using that example then it should be working...

Yeah, you are right. It works. My context is really set to my own GraphQLUserContext. However I can't access the claims that are in my token. Probably I'm not generating my token correctly. Is there any example I can check? Thanks in advance!

from authorization.

Anyone?

from authorization.