AuthorizationOptions.FallbackPolicy Property
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Gets or sets the fallback authorization policy used by CombineAsync(IAuthorizationPolicyProvider, IEnumerable<IAuthorizeData>)
when no authorization metadata (e.g., [Authorize] attribute, RequireAuthorization()) is explicitly provided for a resource.
public:
property Microsoft::AspNetCore::Authorization::AuthorizationPolicy ^ FallbackPolicy { Microsoft::AspNetCore::Authorization::AuthorizationPolicy ^ get(); void set(Microsoft::AspNetCore::Authorization::AuthorizationPolicy ^ value); };public Microsoft.AspNetCore.Authorization.AuthorizationPolicy? FallbackPolicy { get; set; }public Microsoft.AspNetCore.Authorization.AuthorizationPolicy FallbackPolicy { get; set; }member this.FallbackPolicy : Microsoft.AspNetCore.Authorization.AuthorizationPolicy with get, setPublic Property FallbackPolicy As AuthorizationPolicyProperty Value
Remarks
- The `FallbackPolicy` only applies when there are no authorization attributes or explicit policies set. - If a resource has an `[Authorize]` attribute (even without a policy name), the `DefaultPolicy` is used instead of the `FallbackPolicy`. - This means `FallbackPolicy` is mainly relevant for middleware-based authorization flows where no per-endpoint authorization is specified. - By default, `FallbackPolicy` is `null`, meaning it has no effect unless explicitly set.