Property Identity

Namespace

MailFathom.Application.Access

Assembly

MailFathom.Application.dll

Identity

Gets the identity the work was admitted under.

public string Identity { get; }

Property Value

string

Remarks

For a caller it is what the transport admitted it as, and that is not one shape: a configured key's own name where the operator wrote the credential, the issuer and subject the deployment authorized where a token brought it, and the fixed word anonymous where the surface configures no credential for one caller to be told apart from another. Never the credential material in any of the three. For the process identity it is ProcessIdentityName, and for a signed capability it is the object the signature was bounded to.

Nothing decides access from it. It is here for a boundary that has to name the caller to its own readers, and because the token form carries a host name and a remote party's identifier for a person, it never reaches a failure message — PrincipalNotAuthorizedException states why.