TraxAuthClaimTypes

> NO WARRANTY. Trax auth is plumbing, not a security product. You are solely responsible for securing systems that use it. See API Security.

Canonical claim URNs used by every Trax authentication scheme.

ConstantValueProduced by
PrincipalIdtrax:principal-idTraxPrincipal.Id
PrincipalTypetrax:principal-typeTraxPrincipal.PrincipalType (optional)
TraxAuthPolicyTraxAuthPolicyCombined authorization policy that accepts any registered Trax auth scheme.

Using a custom URN (trax:principal-id) instead of ClaimTypes.NameIdentifier avoids collisions with ASP.NET Core Identity. Read via ClaimsPrincipal.TryGetPrincipalId(out var id) or FindFirst(TraxAuthClaimTypes.PrincipalId).