0Pricing
C# Academy · Lesson

Custom Authorization Requirements

Build custom requirements and handlers.

When Built-ins Are Not Enough

Some rules cannot be expressed with RequireRole or RequireClaim - for example "must be at least 18" or "must own this resource".

For these you write a custom requirement plus a handler.

// Rule: user must be older than a configurable minimum age

IAuthorizationRequirement

A requirement is a marker that carries the rule's data. It implements the empty IAuthorizationRequirement interface.

public class MinimumAgeRequirement : IAuthorizationRequirement
{
    public int MinimumAge { get; }
    public MinimumAgeRequirement(int minimumAge) =>
        MinimumAge = minimumAge;
}

All lessons in this course

  1. Role-Based Authorization
  2. Claims-Based Authorization
  3. Policy-Based Authorization
  4. Custom Authorization Requirements
← Back to C# Academy