{"action":"opened","issue":{"url":"https://api.github.com/repos/aspnet/Mvc/issues/2273","labels_url":"https://api.github.com/repos/aspnet/Mvc/issues/2273/labels{/name}","comments_url":"https://api.github.com/repos/aspnet/Mvc/issues/2273/comments","events_url":"https://api.github.com/repos/aspnet/Mvc/issues/2273/events","html_url":"https://github.com/aspnet/Mvc/issues/2273","id":64532233,"number":2273,"title":"Consider renaming [AllowAnonymous]","user":{"login":"blowdart","id":796298,"avatar_url":"https://avatars.githubusercontent.com/u/796298?v=3","gravatar_id":"","url":"https://api.github.com/users/blowdart","html_url":"https://github.com/blowdart","followers_url":"https://api.github.com/users/blowdart/followers","following_url":"https://api.github.com/users/blowdart/following{/other_user}","gists_url":"https://api.github.com/users/blowdart/gists{/gist_id}","starred_url":"https://api.github.com/users/blowdart/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/blowdart/subscriptions","organizations_url":"https://api.github.com/users/blowdart/orgs","repos_url":"https://api.github.com/users/blowdart/repos","events_url":"https://api.github.com/users/blowdart/events{/privacy}","received_events_url":"https://api.github.com/users/blowdart/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-03-26T13:56:06Z","updated_at":"2015-03-26T13:56:06Z","closed_at":null,"body":"The move to policy based Authorization allows developers to write authorization that depends on more than just an identity (for example they could add IP address into the mix). This move highlights that [AllowAnonymous] is badly named.\r\n\r\nThe attribute itself causes requests to bypass any and all Authorization calls that would normally protect access.\r\n\r\nThe attribute should be renamed to accurately reflect its function, however this is a breaking change."}}