Authorize(Roles="Admin") -attribute not working

[yonzo]

When decorating my controller methods with i.e.:
Autorize(Roles="Admin")
I get the 404-errormessage "Not found".

If I remove Roles="Admin", it's all good (as long as the user has logged in of course).
I might be missing some fundamental stuff here, but if so - please enlighten me! :-)

Regards,
Yonzo

[g0t4]

This is likely the identity framework itself

…

On Mon, Mar 13, 2017 at 17:41 yonzo ***@***.***> wrote: When decorating my controller methods with i.e.: *Autorize(Roles="Admin")* I get the 404-errormessage "Not found". If I remove *Roles="Admin"*, it's all good (as long as the user has logged in of course). I might be missing some fundamental stuff here, but if so - please enlighten me! :-) Regards, Yonzo — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#30>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAK_3W1Sag7p3o0G0_wO9cTmGUvOmARvks5rlbgSgaJpZM4Mb2sy> .

[yonzo]

Ok, thanks - I'll look into it some more...

[nohwnd]

@yonzo This is caused by missing Role claim on the user. Identity framework uses claims for authorization by default now, so to achieve this your jwt token provider (or cookie provider) must add Role claim with value 'Admin' to the token.

[JonSomNor]

Thanks a lot nohwnd!