基于声明的身份验证：字符串是声明的本质吗？
我已经使用Windows Identity Foundation进行基于声明的身份验证编程已有一段时间了。
在我看来，在Windows Identity Foundation中，一旦用户登录，声明基本上就是描述用户的信息字符串。
使用旧的基于角色的身份验证，我可以说用户是或不是给定组的成员，但使用基于声明的身份验证，我现在可以拥有描述用户的信息字符串。 “该用户是女性”。该用户出生于“1975年7月6日”。 “该用户使用 USB 密钥登录”。
这是基于声明的身份验证的本质吗？我有框架向应用程序提供的有关用户的信息字符串吗？
I've been programming with claims-based authentication for some time now with Windows Identity Foundation.
It appears to me that in Windows Identity Foundation, once a user is logged in, the claims are basically strings of information that describe the user.
With the old role-based authentication, I could say that a user is or is not a member of a given group, but with claims-based authentication, I can now have strings of information that describe a user. "This user is female". This user was born on "July 6, 1975". "This user logged in using a USB key".
Is it the essence of claims-based authentication,that I have strings of information about the user given to the application by the framework?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
声明是有关与应用程序交互的主题的属性，可以是任何东西。您给出的所有例子基本上都是正确的。
这就是为什么您不仅可以将声明用于驾驶授权规则。例如，它们还可以代表用户个人资料信息。角色成员资格只是另一个属性（主要用于访问控制）。
几点观察：
Claims are attributes about the subject interacting with your application, and can be anything. All the examples you gave are essentially correct.
That's why you can use claims for more than just driving authorization rules. They could also represent user profile information for example. And a role membership is just another attribute (that is mostly used for access control).
Couple observations: