search

aspnet / AspNetKatana

Microsoft's OWIN implementation, the Katana project
Apache License 2.0
963 stars 332 forks source link

Warn that SecurityTokenValidated is not that last step #412

Closed Tratcher closed 3 years ago

Tratcher commented 3 years ago

Fixes #405. Users have been confused by SecurityTokenValidated, thinking it indicated that all authentication is finished. In fact it only refers to one step of the validation, the token itself. Adding a clarifying comment.

This should be ported forward to AspNetCore as well.