Thoughts about authorization
I was wondering what your thoughts about different ways of doing authorization?
Custom filter
Custom middleware
.net auth like policy based or other…
What are the tradeoffs for simple / complex authorization?
Does it matter when it comes In the order of the request? (Before / after middlewares/model binding)
Thanks
Custom filter
Custom middleware
.net auth like policy based or other…
What are the tradeoffs for simple / complex authorization?
Does it matter when it comes In the order of the request? (Before / after middlewares/model binding)
Thanks
