title: Aps .net IdentityServer4 authorize
body: <p>I'm using IdentityServer4 with asp .net identity as authentication point. My APIs/WebApps call identity server to get access token.</p>
  
  <p>Now, how to authorize uses before some action or inside action in my api/app controller?</p>
  
  <p>I can add roles to access token and then in controller (in web api/web app) use AuthorizeAttribute and check if user IsInRole.</p>
  
  <p>But it means that if I will change user roles, he will see it after logout-login (because roles are part of access token) or token has to expire.</p>
  
  <p>I would like to ask identity server about user role(s) each time I need to authorize him to some action (especially to action like modify/delete some data).</p>
  
  <p>Question how?
  Or What I have to looking for?</p>