use different IUserClaimsPrincipalFactory in services, this avoids th…

…e roles being put inside the user principal and consequently in the identity cookie, because they are quite big and unnecessary in our permission-based code (#2022)

TASVideos/Extensions/ServiceCollectionExtensions.cs

@@ -139,6 +139,7 @@ public static IServiceCollection AddServices(this IServiceCollection services)
 	public static IServiceCollection AddIdentity(this IServiceCollection services, IHostEnvironment env)
 	{
 		services.Configure<PasswordHasherOptions>(options => options.IterationCount = 720_000);
+		services.AddScoped<IUserClaimsPrincipalFactory<User>, UserClaimsPrincipalFactory<User>>(); // the default would use UserClaimsPrincipalFactory<User, Role>, but like this we prevent it putting roles in the principal and thus in the identity cookie
 		services.AddIdentity<User, Role>(config =>
 			{
 				config.SignIn.RequireConfirmedEmail = env.IsProduction() || env.IsStaging();