stefanprodan / WebApiThrottle

ASP.NET Web API rate limiter for IIS and Owin hosting
MIT License
1.28k stars 275 forks source link

Clients = Roles #93

Open STRATZ-Ken opened 7 years ago

STRATZ-Ken commented 7 years ago

Is it possible to authenticate against a client role? We use IdentityServer3 and want to have some type of role based throttling.

We could go by id_token but there will be millions of tokens, and I dont think calling a refresh and rebuild the clients portion would be correct.

Thanks,