Thread.CurrentPrincipal is the way .NET applications represent the identity of the user or service account running the process. It can hold one or more identities and allows the application to check if the principal is in a role through the IsInRole method. Most authentication libraries in .NET will verify the user’s credentials and set this … Read more
IIdentity is just used for the user’s authenticated identity, regardless of what roles they may have. IPrincipal is used to combine a user’s identity with the authorized roles they have in a given security context. For example, you can use a third-party login provider, like Facebook or Google, to get the user’s identity, but you … Read more
Here’s how I do it. I decided to use IPrincipal instead of IIdentity because it means I don’t have to implement both IIdentity and IPrincipal. Create the interface interface ICustomPrincipal : IPrincipal { int Id { get; set; } string FirstName { get; set; } string LastName { get; set; } } CustomPrincipal public class … Read more