v1.2.7
Bug Fixes
-
Fixed a bug where the authentication and authorization middleware components would log erroneous warning messages if their functionality was bypassed via a custom component earlier in the pipeline. Both middleware components will now only initiate a logging session if they perform work for the current request.
-
Fixed a bug where the authorization middlware was using a globally scoped
IAuthorizationService
causing an authorization failure in some non-traditional security configurations. The authorization middleware will now use an auth service scoped to the active request.