SAIF.NetCore.NtlmApiAuth API reference¶
This page lists all public types exposed by SAIF.NetCore.NtlmApiAuth. Each type links to its full API reference page.
Types¶
| Type | Kind | Namespace | Purpose |
|---|---|---|---|
| Constants | Class | SAIF.NetCore.NtlmApiAuth |
Centralizes the shared claim/header name literal, plus two unused resource-suffix setting keys that are not read by this library or by the embedded AuthService rewrite. |
| RoleRequirement | Class | SAIF.NetCore.NtlmApiAuth.Authorization |
Self-handling authorization requirement that evaluates one role against the dual (caller + on-behalf-of) identity. |
| AuthorizationHandlerContextExtensions | Class | SAIF.NetCore.NtlmApiAuth.Extensions |
Reads the on-behalf-of claim out of an in-flight authorization context. |
| HttpContextAccessorExtensions | Class | SAIF.NetCore.NtlmApiAuth.Extensions |
Reads the on-behalf-of claim from the current request and forwards it onto an outbound client call. |
| IApplicationBuilderExtensions | Class | SAIF.NetCore.NtlmApiAuth.Extensions |
Registers the on-behalf-of claim middleware in the request pipeline. |
| IHttpJsonClientExtensions | Class | SAIF.NetCore.NtlmApiAuth.Extensions |
Configures a typed HTTP client to persist headers and send the current user as the on-behalf-of header. |
| IServiceCollectionExtensions | Class | SAIF.NetCore.NtlmApiAuth.Extensions |
Registers the server-side authorization services and the client-side current-user services. |
| StringExtensions | Class | SAIF.NetCore.NtlmApiAuth.Extensions |
Normalizes usernames and rewrites AD resource-group names for the current environment. |
| SwaggerGenOptionsExtensions | Class | SAIF.NetCore.NtlmApiAuth.Extensions |
Adds a debug-only Swagger UI header parameter for exercising on-behalf-of authorization. |
| ClientAppType | Enum | SAIF.NetCore.NtlmApiAuth.Extensions |
Selects which ICurrentUserService implementation is registered for a client application. |
| OnBehalfOfUserClaimMiddleware | Class | SAIF.NetCore.NtlmApiAuth.Middleware |
Request-pipeline middleware that converts the on-behalf-of header into a claim on the authenticated identity. |
| ConfigureRoleAuthorizationOptions | Class | SAIF.NetCore.NtlmApiAuth.Options |
Abstract base consumers subclass to declare named role policies against AuthorizationOptions. |
| ICurrentUserService | Interface | SAIF.NetCore.NtlmApiAuth.Services |
Resolves the current username on the client side for on-behalf-of header population. |
| INtlmApiAuthorizationService | Interface | SAIF.NetCore.NtlmApiAuth.Services |
Contract for the dual-identity role authorization decision. |
| IOnBehalfOfUserClaimService | Interface | SAIF.NetCore.NtlmApiAuth.Services |
Contract for converting the on-behalf-of header into a claim. |
| BlazorCurrentUserService | Class | SAIF.NetCore.NtlmApiAuth.Services |
Resolves the current username from Blazor's AuthenticationStateProvider. |
| MvcCurrentUserService | Class | SAIF.NetCore.NtlmApiAuth.Services |
Resolves the current username from the ASP.NET Core MVC HttpContext. |
| NtlmApiAuthorizationService | Class | SAIF.NetCore.NtlmApiAuth.Services |
Performs the dual-identity role check by delegating each identity to AuthService's remote SecurityAPI, confirmed against the repository's 10.x SecurityClient source; applicability to the pinned 8.2023.319.2 package is inferred*. |
| OnBehalfOfUserClaimService | Class | SAIF.NetCore.NtlmApiAuth.Services |
Writes the on-behalf-of header value onto the authenticated identity as a claim. |
| OnBehalfOfUserHeaderParameterFilter | Class | SAIF.NetCore.NtlmApiAuth.Swagger |
Swagger operation filter that documents the on-behalf-of header as a UI parameter. |
Related documentation¶
- Index
- Overview
- Architecture
- Dependencies
- Operations and processes
- Business rules
- Security and authorization
- Service registration
Note: Statements marked with
*were inferred from code structure, naming conventions, or contextual evidence where direct confirmation was not available in source artifacts.
Sources¶
src/SAIF.NetCore.NtlmApiAuth/src/SAIF.NetCore.NtlmApiAuth/