Make a custom implementation- our requirements are more detailed and nuanced than the ASP identity approach would allow. The spreadsheet Api Endpoints.xsls will list basic user type and role access:
Very few endpoints allow anonymous, unauthenticated access.
Some endpoints allow access to any authenticated user.
Some endpoints are only allowed to certain user types.
Artist endpoints are available to admins, as well as members and managers of the artist.
User endpoints are available to admins, as well as the user themselves.
When a non-admin, non-self, user requests data, tax ids and SSNs are nulled out in response data.
User authentication token is null on every response except the login response.
Make a custom implementation- our requirements are more detailed and nuanced than the ASP identity approach would allow. The spreadsheet Api Endpoints.xsls will list basic user type and role access: