Storing logged user on asp net core 2

Question

I need suggestion about storing logged user. i have front application and we are using token for authorization, I check that token on some authentication server, then I got user from db to do some extra checks for access rights.. But somewhere I need that user again (like to log some changes that he did), and I need advice, is it better to every time get user's email from token, then need to ping database or it's better to make same global variable and to get it when I need.. I know that second approach is faster, but is it good one?

Answer 1

When you authorise a user using token, the best way is to add this to the ClaimsPrinciple (claims). Then you can be able to access it using Identity.User