asp.net - Is there any way for a User in SignalR to know in which group he belongs to from the client side? -


note: security related question.

i putting users in groups, name moderately sensitive (database object ids).

i sending messages groups server side, never client (that's why putting db object ids in group's names not problem me).

from understanding, assuming signalr managing groups deep inside core, , communicate each connections, not sure.

so questions are:

does groups name hidden client?

or possible user (from client side), discover in group(s) belongs to? (and potentially discover sensitive data if developer assuming groups names hidden/inaccessible)

group names exposed if passed them client.

from server side, signalr has no api maintain or expose this. can maintain own group names, exposure come own doing.

as far security goes, should handled outside of signalr.

you can check out using roles if need restrict on specific methods such (link): [authorize(roles = "admin")] public class adminauthhub : hub { }


Comments

Popular posts from this blog

python - Selenium remoteWebDriver (& SauceLabs) Firefox moseMoveTo action exception -

html - How to custom Bootstrap grid height? -

angular - Copying node modules to wwwroot AspNetCore -