Questions regarding Security, Authentication and Authorization

[DerDane]

Hello,

since I am rather new to SignalR an couldn't really find anything I want to ask my questions here.

I want to implement the authorization but couldn't really find anything helpfull in this regard at the Microsoft Docs.
(https://docs.microsoft.com/en-us/aspnet/signalr/overview/security/hub-authorization)
- How exactly can I implement this function, specifically how can one client can get a Role or group?
- How can one implement custom Roles?
- is it possible to reject a connection if a certain Username and Password which is send to the Host isn't correct?
- and is it safe to send a username and password with the Connection header

I Hope I can get a few answers

DerDane

[davidfowl]

How much knowledge do you have about general authentication and authorization options in this space? Do you have an idea of what your scenario would require? Are you talking to an existing user management system or are you creating a new one?

[MacrayBlackhand]

In my use case, my SignalR project runs in conjunction with my main MVC project and I use Identity in the primary project to authenticate my SignalR connections. Be advised that configuring CORS is required for this type of arrangement.

…

---- On Mon, 12 Sep 2022 02:54:16 -0500 David Fowler ***@***.***> wrote --- How much knowledge do you have about general authentication and authorization options in this space? Do you have an idea of what your scenario would require? Are you talking to an existing user management system or are you creating a new one? — Reply to this email directly, #4630 (comment), or https://github.com/notifications/unsubscribe-auth/AWTX3ZRALZWLVCRL47AVSLLV53OSRANCNFSM5XFATXXQ. You are receiving this because you are subscribed to this thread.