Tutorial:Authority verification logic

Authentication logic

In this chapter, you will learn:

• authorization process
• authorization services work

Process

ClientRequest -> AuthMiddleware -> AuthHandler -> Response auth result

How service work

1. Request first go in middleware call "CheckAuthorization" method.
2. In "CheckAuthorization" method extract the credentials at the location you defined.The credential location is Query/Header/Cookie.
3. Check your defined authorization source sequence.Once the source returns the authorization status, the remaining sources will not be executed.

Default sequence:
AuthCenter -> Cache -> Database -> Default(Attribute)

4. You need to define your own AuthHandler.You can define the "Cahce" and "Database" authorization behavior in the sequence.
5. If your AuthHanler returns true, then your business code will execute normally.If false you need keep looking.
6. In "AuthOptions.NonAccessParm" you can define no access time response code,response ContentType and response body.

Default http response:

Http Code: 200 
Body:
{
    "status":403,
    "msg":"No permission"
}