title: ResourceAuthorize("Read","UsersList") not working, ResourceAuthorizationManager
body: <p>I am using IdentityServer3 to issue tokens and trying to use Thinktecture.IdentityModel.Owin.ResourceAuthorization.WebApi to authorize resource access of the web api. </p>
  
  <p>I am using below code to Authorize an action of the controller.</p>
  
  <pre><code>[ResourceAuthorize("Read","UsersList")]
  </code></pre>
  
  <p>ResourceAuthorizationManager looks like below.</p>
  
  <pre><code>    public class MyAuthorizationManager : ResourceAuthorizationManager
  {
      /// &lt;summary&gt;
      /// Verify Access Rights
      /// &lt;/summary&gt;
      /// &lt;param name="context"&gt;&lt;/param&gt;
      /// &lt;returns&gt;&lt;/returns&gt;
      public override Task&lt;bool&gt; CheckAccessAsync(ResourceAuthorizationContext context)
      {
          switch (context.Resource.First().Value)
          {
              case "UsersList":
                  return AuthorizeUsersList(context);
              default:
                  return Nok();
          }
      }
  
      private Task&lt;bool&gt; AuthorizeUsersList(ResourceAuthorizationContext context)
      {
          switch (context.Action.First().Value)
          {
              case "Read":
                  return Eval(context.Principal.HasClaim("role", "User"));
              case "Write":
                  return Eval(context.Principal.HasClaim("role", "Owner"));
              default:
                  return Nok();
          }
      }
  }
  </code></pre>
  
  <p><strong>However, when control comes to AuhtorizeUsersList, the context.Principal has no role claims. I do not store the user claims when I register a user. How can I add claims for an authenticated user on the go ?</strong></p>