Dynamic Authorization Policies
By default, ASP.NET Core Authorization Policies are defined in the Startup.cs file of the application. The policy requirements such as roles and/or claims defined there can be changed, but doing so requires re-compiling and deploying the application. In contrast, this solution stores the policy requirements in data storage so that role and claim requirements can be changed at any time from the provided management user interface which is implemented in ASP.NET Core MVC.
This solution can be used with any ASP.NET MVC web application that uses Authorization Policies defined by roles and claims. There is also an integration library to use this solution with cloudscribe Core, allowing you to define different policy requirements per tenant for a given policy name.
This solution is available as a set of NuGet packages so you can try the solution before purchasing a per host name license. In the absence of a valid license file you will see messages indicating the product is in trial mode.