Asp.net core WEB API secure 3rd party middleware routes?

Question

Looking for suggestions of how to go about this:

I have an asp.net core 2 webapi project secured with JWT authentication and user role authorization.

I added a 3rd party middleware in my asp.net webapi that exposes metrics endpoints.

I can set the endpoint route and port in the metrics middleware but there is no option for authorization.

I would like to secure those endpoints the same as my own API endpoints so only a certain role can access them, but not sure how to go about this, perhaps some other custom middleware lower down the chain that spots those routes and checks for the JWT?

Mark G · Accepted Answer · 2018-05-02 16:43:36Z

2

You have the right idea, below is an example of how you could secure that by endpoint.

public class MyAuthorizeMiddleware
{
    private readonly RequestDelegate _next;

    public MyAuthorizeMiddleware(RequestDelegate next)
    {
        _next = next;
    }

    public async Task Invoke(HttpContext context)
    {
        if (context.Request.Path.StartsWithSegments("/endpoint")
            && !context.User.Identity.IsAuthenticated)
        {
            context.Response.StatusCode = StatusCodes.Status401Unauthorized;
            return;
        }

        await _next.Invoke(context);
    }
}

answered May 2, 2018 at 16:43

Mark G

3,1441 gold badge29 silver badges35 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Asp.net core WEB API secure 3rd party middleware routes?

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related