So, what is the purpose for existence of both IIdentity
and IPrincipal
, and not some IIdentityMergedWithPrincipal
? When is it not enough t
As MSDN site says:
The identity object encapsulates information about the user or entity being validated. At their most basic level, identity objects contain a name and an authentication type.
whereas
The principal object represents the security context under which code is running.
Refer to the above link for a lot more info.
HTH