AUA Framework Training — Episode 18

Access Levels & Framework Features

Deep Dive into Authentication Models, Security Infrastructure, and Enterprise Capabilities in AUA

Watch Video on YouTube

Authentication & Authorization Control

A key feature of any robust software application is user authentication and authorization control. The AUA framework's user management module enables webmasters to plan user activity by defining roles, assigning permissions, and restricting access down to the finest action levels with minimal performance overhead.

Built-in Authorization Models

1. WebApiAuthorize

Specifies granular access levels and roles for controllers and actions.

2. AllowLoggedInAuthorization

Requires the user to be successfully logged in to access the resource.

3. OnlyLocalActionAuthorize

Restricts target actions and controllers exclusively to local server calls.

4. AllowAnonymousAuthorize

Grants unlimited public access to the specified controller or action.

5. IpWebApiAuthorize

Restricts resource access dynamically based on designated IP address ranges.

6. OnlyHasAccessTokenAuthorization

Ensures the client possesses a valid, operational access token.

Core Features & Capabilities of AUA Framework

Comprehensive reporting and data visualization infrastructure.
Seamless handling of views, database procedures, and tables.
Advanced encryption algorithms and strict security considerations.
Sophisticated modeling and mapping for complex queries.
Developer focus on business logic by isolating infrastructure boilerplate.
Clean layering, categorizing services, and unified naming conventions.
Built-in In-Memory caching and external service integration layers.
Proven compatibility with Microservices, CQRS, and Clean Architecture.

2. Decrypting Encrypted Key IDs (BaseEncryptionVm)

UserVm.cs

To prevent URL parameter tampering, transfer sensitive record primary keys safely in encrypted form using DecKeyId<T>().

public class UserDetailVm : BaseEncryptionVm
{
    // Property holding the encrypted Key String passed from client
    public string KeyId { get; set; }

    // Helper method to extract original Long ID safely
    public long GetId()
    {
        return DecKeyId<long>(KeyId);
    }
}
“
”
"If you think good architecture is expensive, try bad architecture."
AUA Framework Philosophy

Official Channels & Community

Connect with the AUA Framework ecosystem.

Episode 18 Completed Login Mechanisms