leastprivilege.com
AuthenticateRequest vs PostAuthenticateRequest
I get questions every now and then why there are these two events and which one to use for what. The way I like to think about it: If you change the IIdentity – use AuthenticateRequest. If yo…