Azure Function 2.x - Get Current User's Claims

Question

I have an Azure Function 2.x (Asp.net Core) and am authenticating with Azure AD. I'm trying to access the logged-in user's Claims after authentication. Previously using Azure Functions 1.x we would get the Claims using ClaimsPrincipal.Current, as seen in the code below:

using System.Net;
using System.Collections.Generic;
using System.Security.Claims; 
using Microsoft.IdentityModel.Clients.ActiveDirectory; 

public static HttpResponseMessage Run(HttpRequestMessage req, out object document, TraceWriter log)
{
    string name = ClaimsPrincipal.Current.FindFirst("name").Value; 

    log.Info($"name is {name}");

    return req.CreateResponse(HttpStatusCode.OK, "Done");
}

Any guidance on how we access Claims in Azure Functions 2.x using .Net Core?

in .Net Core, ClaimsPrincipal.Current is set to null so it cannot be used to get the user's Identity — desflan, Aug 07 '18 at 21:15

Connor McMahon · Accepted Answer · 2019-03-12T19:01:56.573

8

This feature is now supported in C# in Azure Functions 2.0. You can now add ClaimsPrincipal as a parameter to your HttpTrigger function's signature, or you can access it on the HttpRequest object via req.HttpContext.User.

Support should be coming soon to JavaScript, and eventually all languages should support this feature.

edited Mar 12 '19 at 19:01

answered Aug 07 '18 at 23:28

Connor McMahon

1,318
7
15

Thanks Connor. In your link you mention it is possible in Functions V2 to get the ClaimsPrincipal of the current user as a parameter instead - can you tell me what you mean by this, as it may be a way to access claims in the meantime. Cheers – desflan Aug 08 '18 at 06:17
2

@desflan, that is the feature that we are currently adding. It is unfortunately not currently available, but expect it in the near future. – Connor McMahon Aug 08 '18 at 23:22

score 2 · Answer 2 · answered Mar 26 '20 at 15:36

Let me just post a code example here, see where ClaimsPrincipal parameter is:

[FunctionName("MyFunctionName")]
public static HttpResponseMessage Run(
            [HttpTrigger(
                AuthorizationLevel.Anonymous,
                "get", "post",
                Route = "MyFunctionName")]HttpRequestMessage req, 
            ILogger log, 
            ClaimsPrincipal claimsPrincipal)
{
    // My function code here...
}

Azure Function 2.x - Get Current User's Claims

2 Answers2

Linked