Field RoleClaimType

Namespace

MailFathom.Infrastructure.Security.OAuth

Assembly

MailFathom.Infrastructure.dll

The claim type a role check reads on an identity this produces, which nothing ever issues.

public const string RoleClaimType = "urn:mailfathom:oauth-role"

Returns

string

The claim type a role check reads on an identity this produces, which nothing ever issues.

Remarks

Named rather than left empty, because an empty role type is not the absence of one: ClaimsIdentity restores the framework's default when it is given one, and the token validator refuses it outright. A claim type no mapping ever writes is what actually makes a role check answer no, whatever an authorization server put in the token.