ClaimSet Class

Definition

public ref class ClaimSet abstract : System::Collections::Generic::IEnumerable<System::IdentityModel::Claims::Claim ^>

public abstract class ClaimSet : System.Collections.Generic.IEnumerable<System.IdentityModel.Claims.Claim>

[System.Runtime.Serialization.DataContract(Namespace="http://schemas.xmlsoap.org/ws/2005/05/identity")]
public abstract class ClaimSet : System.Collections.Generic.IEnumerable<System.IdentityModel.Claims.Claim>

type ClaimSet = class
 interface seq<Claim>
 interface IEnumerable

[<System.Runtime.Serialization.DataContract(Namespace="http://schemas.xmlsoap.org/ws/2005/05/identity")>]
type ClaimSet = class
 interface seq<Claim>
 interface IEnumerable

Public MustInherit Class ClaimSet
Implements IEnumerable(Of Claim)

Inheritance

Object

ClaimSet

Derived

System.IdentityModel.Claims.DefaultClaimSet

System.IdentityModel.Claims.WindowsClaimSet

System.IdentityModel.Claims.X509CertificateClaimSet

Attributes

DataContractAttribute

Implements

IEnumerable<Claim> IEnumerable

Examples

public class MyServiceAuthorizationManager : ServiceAuthorizationManager
{

 protected override bool CheckAccessCore(OperationContext operationContext)
 {
 // Extract the action URI from the OperationContext. Match this against the claims
 // in the AuthorizationContext.

 string action = operationContext.RequestContext.RequestMessage.Headers.Action;
 Console.WriteLine("action: {0}", action);

 // Iterate through the various claim sets in the AuthorizationContext.
 foreach (ClaimSet cs in operationContext.ServiceSecurityContext.AuthorizationContext.ClaimSets)
 {
 // Examine only those claim sets issued by System.
 if (cs.Issuer == ClaimSet.System)
 {
 // Iterate through claims of type "http://example.org/claims/allowedoperation".
 foreach (Claim c in cs.FindClaims("http://example.org/claims/allowedoperation",
 Rights.PossessProperty))
 {
 // Write the claim resource to the console.
 Console.WriteLine("resource: {0}", c.Resource.ToString());

 // If the claim resource matches the action URI then return true to allow access.
 if (action == c.Resource.ToString())
 return true;
 }
 }
 }

 // If this point is reached, return false to deny access.
 return false;
 }
}

Public Class MyServiceAuthorizationManager
 Inherits ServiceAuthorizationManager

 Protected Overrides Function CheckAccessCore(ByVal operationContext As OperationContext) As Boolean

 ' Extract the action URI from the OperationContext. Match this against the claims
 ' in the AuthorizationContext.
 Dim action As String = operationContext.RequestContext.RequestMessage.Headers.Action
 Console.WriteLine("action: {0}", action)

 ' Iterate through the various claim sets in the AuthorizationContext.
 Dim cs As ClaimSet

 For Each cs In operationContext.ServiceSecurityContext.AuthorizationContext.ClaimSets
 ' Examine only those claim sets issued by System.
 If cs.Issuer Is ClaimSet.System Then
 ' Iterate through claims of type "http://example.org/claims/allowedoperation".
 Dim c As Claim
 For Each c In cs.FindClaims("http://example.org/claims/allowedoperation", Rights.PossessProperty)
 ' Write the claim resource to the console.
 Console.WriteLine("resource: {0}", c.Resource.ToString())

 ' If the claim resource matches the action URI then return true to allow access
 If action = c.Resource.ToString() Then
 Return True
 End If
 Next c
 End If
 Next cs
 ' 
 ' If this point is reached, return false to deny access.
 Return False

 End Function

Remarks

After the ClaimSet class has been created, it cannot be changed.

Examining the content of a ClaimSet for particular types of claims is a common task when using claim-based authorization. To examine a ClaimSet for the presence of particular claims, use the FindClaims method. The method provides better performance than iterating directly over the ClaimSet.