Azure / Azure/azure-functions-dotnet-worker

Authentication/Authorization aligned with ASP.NET API

Open
#856 11 comments 35 reactions 2 assignees Assigned to @fabiocav View on GitHub
area: http
Dominant language
C#
Stars
466
Forks
215
Avg merge
3d 10h
Merged PRs (30d)
7

Description

This is more of a question/feature request.

HTTP triggered Functions are great for API implementation. With the Consumption plan or client-side architected applications, HTTP triggered functions are a great choice for backend API implementation. Anyone coming from the ASP.NET API world is familiar with Authentication/Authorization concepts. Unfortunately, there's no equivalent for Azure Functions (In-Proc and Isolated SDKs). The authentication out-of-the-box is solely for Function invocation and is not related to Authentication providers. Authorization with `Authorize` attribute, supporting Roles and Policies have not equivalent whatsoever. This leads developers to re-invent the wheel and build their own AuthN/AuthZ for Functions.

It would be great if these would be provided by Functions SDK and aligned with [ASP.NET API apis](https://docs.microsoft.com/en-us/aspnet/web-api/overview/security/authentication-and-authorization-in-aspnet-web-api).

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.