Question about converting UmbracoAuthorizedApiController to ManagementApiControllerBase

[HFloyd (Heather Floyd)]

Thanks for these links, @mistyn8.

I was looking at implementing the example in the “External Access” doc, but I see that this example requires an API User added to the system… which would be fine, except that if the code is set up on the site, then it would of course have the correct API key, and I am still trying to figure out how to check that the person trying to view the page is logged-in…

I saw this other (now closed) thread by @skartknet where he was able to hook into the back-office token using localStorage somehow, but no code snippets were provided, so I’m not sure how that would work…

@jacob says

@jacob

The equivalent to the UmbracoAuthorizedApiController would be ManagementApiControllerBase and an added Authorize filter, like so:

[Authorize(Policy = AuthorizationPolicies.BackOfficeAccess)]
public class MyControllerBase : ManagementApiControllerBase
{}

That hooks your controller up to the .NET authentication, and you can query them using the Backoffice access_token or the token from an API User.

But I’m still not sure how to get the “Backoffice access_token” in my controller