Property PrincipalIdentity

Namespace

MailFathom.Application.Access

Assembly

MailFathom.Application.dll

PrincipalIdentity

Gets what the work in hand was admitted as, or null where it was reached under no principal.

public string? PrincipalIdentity { get; }

Property Value

string

Remarks

It decides nothing and is never asked before an operation runs. It is here for a boundary that has to name the caller in a record of its own — which is what an operator diagnosing a refusal reads, since the MCP surface tells a refused caller nothing at all — and reading it through the same object the decision was asked of is what keeps a boundary from acquiring the principal source and deciding for itself what holding a permission means.

What it carries is what Identity carries, which for a token is the issuer and the subject the deployment authorized — a host name and a remote party's identifier for a person. That is why PrincipalNotAuthorizedException is barred from naming it and why a boundary reading it decides for itself what its own readers may see.