Enum SessionAccessOptions
Options for configuring session access behavior.
Namespace: Singulink.Net.Http.Api.Service
Assembly: Singulink.Net.Http.Api.Service.dll
Syntax
[Flags]
public enum SessionAccessOptionsFields
| Name | Description |
|---|---|
| AllowAllOrigins | Indicates that session token access should be allowed for all origins. This option should only be used for requests that are not sensitive to CSRF attacks. |
| ForceValidate | Indicates that the session must be validated against the session store and the session token information checked for changes before the request is processed, even if the token is not due for a refresh yet. As with a periodic refresh, if the token information is out of date a new token is created from the latest data and returned to the caller (and re-issued to the client) so that the request operates on current information. Intended for security-sensitive operations (e.g. permanent deletions) where acting on stale session information is not acceptable. |
| None | Indicates that no special session options are set. |
| OptionalUserIdPrecondition | Indicates that the user ID precondition should be optional (i.e. it is only checked to see if it matches the session token user ID if it is provided in the request). |