ODataAuthorization: A library for Securing OData Endpoints

[bytefish]

I have recently updated ODataAuthorization, which is a library for authorizing OData requests:

• https://github.com/bytefish/ODataAuthorization

You basically set the Read / Update / Delete Restrictions on the EntitySets in your IEdmModel:

products.HasReadRestrictions()
    .HasPermissions(p =>
        p.HasSchemeName("Scheme").HasScopes(s => s.HasScope("Product.Read")))
    .HasReadByKeyRestrictions(r => r.HasPermissions(p =>
        p.HasSchemeName("Scheme").HasScopes(s => s.HasScope("Product.ReadByKey"))));

And then you can add Authorization to the ASP.NET Core OData Endpoints like this:

using ODataAuthorization;

// ...

builder.Services.AddAuthorization(options =>
{
    options.AddODataAuthorizationPolicy();
});

// ...

var app = builder.Build();

// ...

app
    .MapControllers()
    .RequireODataAuthorization();

It is based on the WebApiAuthorization library by Microsoft.

You can find a complete example here:

• https://github.com/bytefish/ODataAuthorization/tree/main/samples/CookieAuthenticationSample