AuthClaimTypes

The claim names this package reads and writes. Use these constants rather than string literals, so a token minted by one package is understood by another.

UserId

Carries the authenticated user's public identifier as a Guid. Read by GetCurrentUserId, which also falls back to the standard ClaimTypes.NameIdentifier.

using System.Security.Claims;
using AlmightyShogun.AspNet.Auth;

public sealed class SessionTokenFactory(IAuthTokenGenerator tokenGenerator)
{
    public AuthToken CreateFor(Guid identifier) => tokenGenerator.Generate([
        new Claim(AuthClaimTypes.UserId, identifier.ToString())
    ]);
}

Type signature

public const string UserId = "userId";

Permission

Carries a single granted permission. A principal may hold many, and AuthPermission matches against all of them.

using System.Security.Claims;
using AlmightyShogun.AspNet.Auth;

AuthToken token = tokenGenerator.Generate([
    new Claim(AuthClaimTypes.Permission, "users.read"),
    new Claim(AuthClaimTypes.Permission, "orders.*")
]);

Type signature

public const string Permission = "permission";