Skip to main content

Find .NET endpoint security

io.moderne.prethink.calm.FindDotnetEndpointSecurity

Per-endpoint security requirements derived from ASP.NET Core [Authorize] (Policy/Roles/AuthenticationSchemes) and [AllowAnonymous].

Recipe source​

This recipe is only available to users of Moderne.

This recipe is available under the Moderne Proprietary License.

Used by​

This recipe is used as part of the following composite recipes:

Usage​

This recipe has no required configuration options. Users of Moderne can run it via the Moderne CLI.

You will need to have configured the Moderne CLI on your machine before you can run the following command.

shell
mod run . --recipe FindDotnetEndpointSecurity

If the recipe is not available locally, then you can install it using:

mod config recipes jar install io.moderne.recipe:rewrite-prethink:0.6.0

See how this recipe works across multiple open-source repositories​

Run this recipe on OSS repos at scale with the Moderne SaaS.

The community edition of the Moderne platform enables you to easily run recipes across thousands of open-source repositories.

Please contact Moderne for more information about safely running the recipes on your own codebase in a private SaaS.

Data Tables​

Endpoint security​

io.moderne.prethink.table.EndpointSecurity

Per-endpoint security requirements: roles, scopes, and the raw SpEL/permission expressions from @PreAuthorize/@Secured/@RolesAllowed at method or class level.

Column NameDescription
Endpoint IDJoin key matching the 'Entity ID' column of service-endpoints.csv.
Scope kindWhere the security rule was declared: 'method' (on the handler) or 'class' (on the controller).
Scheme typeDetected scheme: 'role' (hasRole/RolesAllowed/Secured), 'authority/scope' (hasAuthority/hasAnyAuthority - typically OAuth2 scopes), 'permitted' (PermitAll), 'denied' (DenyAll), 'expression' (other SpEL).
RolesComma-separated role literals extracted from the expression, else null.
ScopesComma-separated scope/authority literals extracted from the expression, else null.
ExpressionRaw SpEL or annotation argument value.