Subscription authorization

[Alan5142]

I have a question, how can I use authorization in subscriptions?
Below is my app configuration

public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
{
    app.UseStaticFiles();
    if (env.IsDevelopment())
    {
        app.UseDeveloperExceptionPage();
    }
    else
    {
        app.UseSpaStaticFiles();
        app.UseExceptionHandler("/Error");
        app.UseHsts();
    }


    app.UseAuthentication();
    app.UseAuthorization();

    app.UseRouting();
    app.UseWebSockets()
        .UseGraphQL("/api/graphql/")
        .UsePlayground("/api/graphql/")
        .UseGraphQLSubscriptions(new SubscriptionMiddlewareOptions
        {
            Path = "/api/graphql/"
        });
    app.UseHangfireDashboard();

    app.UseEndpoints(endpoints =>
    {
        // Mapping of endpoints goes here:
        endpoints.MapControllers();
    });

    app.UseSpa(spa =>
    {
        spa.Options.SourcePath = "web-app";
        if (env.IsDevelopment())
        {
            spa.UseAngularCliServer(npmScript: "start");
        }
    });
}

Authorization works in Query and Mutation but in Subscription ClaimsPrincipal doesn't exist, so I think the token is not being sent to the server.

Subscription user is not authorized

Mutation authorization

[michaelstaib]

Authentication over web sockets works differently, read the following issue on ASP.NET Core for more infos:

dotnet/aspnetcore#2881

[alhe99]

@Alan5142 did you solved authentication implementation in Subscription, I Have the sam problem with Hot Chocolate 11?

[Alan5142]

@AlonsoHernandez99 IIRC I sent the authorization code in the query string but ain't secure. You can send the token in a header, keep in mind that you need to handle this in a custom JwtBearerEvents