It would be better to extend UserClaims.Razor to display the Translated SID Description

[jhogan05]

Description

Most SID are opaque to many (even experienced) Windows users and developers, but Groups less so (e.g NT Authority / Domain Users).

Since this code can only run on a Windows system, it would be better to display information in terms of what would be returned in an Authorised user on a Windows Domain linked computer.

• Render the information in HTML Table for improved appearance
• Translate PrincipalGroupSID and GroupSID to Readable form

See below:

and

Page URL

https://learn.microsoft.com/en-us/aspnet/core/blazor/security/blazor-web-app-with-windows-authentication?view=aspnetcore-10.0

Content source URL

https://github.com/dotnet/AspNetCore.Docs/blob/main/aspnetcore/blazor/security/blazor-web-app-with-windows-authentication.md

Document ID

34e4285b-c559-a3e1-30b2-4ff240e7a9fb

Platform Id

796db7a0-bc23-6666-70b4-7f96f81cdf46

Article author

@guardrex

Metadata

• ID: 34e4285b-c559-a3e1-30b2-4ff240e7a9fb
• PlatformId: 796db7a0-bc23-6666-70b4-7f96f81cdf46
• Service: aspnet-core
• Sub-service: blazor

Related Issues

[github-actions]

🏖️🌞 Summertime!! Woot!! 🏐⛵

Stand-by! ... A green dinosaur 🦖 will be along shortly to assist.

[guardrex]

Thanks for the suggestion, @jhogan05. Please place the entire component in an issue comment here as Razor code (surround it with triple-backticks and the "razor" code language) ...

```razor
{CODE HERE}
```

@halter73 @mikekistler ... Do you think we should take the approach suggested by @jhogan05?

[jhogan05]

@page "/user-claims"
@using System.Security.Claims
@using System.Security.Principal

<PageTitle>User Claims & Roles</PageTitle>

<h1>User Claims & Roles</h1>

@if (claims.Any())
{
    <table class="table">
        <thead>
            <tr>
                <th>Type</th>
                <th>Value</th>
                <th>Translation</th>
                <th>Issuer</th>
            </tr>
        </thead>
        <tbody>
            @foreach (var claim in claims)
            {
                <tr>
                    <td>@claim.Type</td>
                    <td>@claim.Value</td>
                    <td>@GetClaimAsHumanReadable(claim)</td>
                    <td>@claim.Issuer</td>
                </tr>
            }
        </tbody>
    </table>
}
else
{
    <p>No claims available.</p>
}

<h1>User Roles</h1>

@if (roles.Any())
{
    <ul>
        @foreach (var role in roles)
        {
            <li>@role</li>
        }
    </ul>
}
else
{
    <p>No roles available.</p>
}

@code {

    private IEnumerable<Claim> claims = Enumerable.Empty<Claim>();
    private IEnumerable<string> roles = Enumerable.Empty<string>();

    [CascadingParameter]
    private Task<AuthenticationState>? AuthState { get; set; }

    protected override async Task OnInitializedAsync()
    {
        if (AuthState == null)
        {
            return;
        }

        var authState = await AuthState;

        claims = authState.User.Claims;

        roles = authState.User.Claims
            .Where(claim => claim.Type == ClaimTypes.Role)
            .Select(claim => claim.Value);
    }

    private string GetClaimAsHumanReadable(Claim claim)
    {
        return claim.Type switch
        {
            ClaimTypes.Name => "",
            ClaimTypes.Email => "",
            ClaimTypes.Role => "",
            ClaimTypes.PrimarySid => $"{GetSidAsHumanReadable(claim)}",
            ClaimTypes.PrimaryGroupSid => $"{GetSidAsHumanReadable(claim)}",
            ClaimTypes.GroupSid => $"{GetSidAsHumanReadable(claim)}",
            _ => $""
        };
    }

    private string GetSidAsHumanReadable(Claim claim)
    {
        SecurityIdentifier sid = new SecurityIdentifier(claim.Value);

        try
        {
            // This will throw an exception if the SID cannot be translated
            var account = sid.Translate(typeof(NTAccount));
            return account.ToString();
        }
        catch (IdentityNotMappedException)
        {
            return $"(Could not be mapped to an recognised user or group account)";
        }

    }
}

[mikekistler]

I defer to @halter73 on this.

[jhogan05]

I have moved most of the translation issues to blazor sample repository, as well as some other suggestions for these.
On re-reading the instruction looks like that is the better place?