in Twitter/Connector/Auth/AuthenticateRequest.cs [63:75]
private static bool CheckIfCallerClaimIsAuthorized(IEnumerable<Claim> currentClaims)
{
bool isAuthorized = false;
string whitelistedClientId = "570d0bec-d001-4c4e-985e-3ab17fdc3073";
Claim appIdClaim = currentClaims.FirstOrDefault(c => c != null && c.Type != null && c.Type.ToLower().Equals("appid"));
if (appIdClaim != null && !string.IsNullOrEmpty(appIdClaim.Value))
{
isAuthorized = whitelistedClientId.Contains(appIdClaim.Value);
}
string tenantId = ClaimsPrincipal.Current.FindFirst("http://schemas.microsoft.com/identity/claims/tenantid")?.Value;
return isAuthorized && (tenantId != null);
}