---
title: Authentication requests in C# SDK
slug: cms-13/docs/authentication
docTags: 
createdAt: 2026-07-30T20:22:06.571Z
---

The Optimizely Graph C# SDK supports two authentication methods. The authentication method determines which content your queries can return from Optimizely Graph.

## Single Key authentication

[Single Key authentication](docId\:sNcLLcLYgWv_QVb0Mtqus) is the default configuration. In this mode, queries return only published content that is publicly available. You do not need to add status filters to your queries.

Use this mode for public websites where only published content should appear.

### Single Key query example

```csharp
var result = await _graphClient
    .QueryContent<BlogPostPage>()
    .Where(x => x.Author == "John Developer")
    .Limit(10)
    .GetAsContentAsync();
```

Use Single Key authentication for the following scenarios:

- Serve published content on a public-facing website.
- Avoid manually filtering content status in queries.

## Basic authentication

[Basic authentication](docId\:sNcLLcLYgWv_QVb0Mtqus) provides access to all content, including drafts and unpublished items.

### Display content on a website with `WithDisplayFilters`

If the query displays content on a website, use `WithDisplayFilters()` in the query chain before `GetAsContentAsync()`. This method applies publishing filters and passes the currently authenticated user (if any) into the query.

```csharp
var result = await _graphClient
    .QueryContent<BlogPostPage>()
    .Where(x => x.Author == "John Developer")
    .WithDisplayFilters()
    .Limit(10)
    .GetAsContentAsync();
```

### Take full control with `WithAuth`

For full control over authentication and authorization, use `WithAuth()`. This method exposes all authentication and authorization options.

```csharp
var result = await _graphClient
    .QueryContent<BlogPostPage>()
    .Where(x => x.Author == "John Developer")
    .WithAuth(x => x.AuthenticationMode = AuthenticationMode.FullAccess)
    .Limit(10)
    .GetAsContentAsync();
```

Use `AuthenticationMode.FullAccess` to load any content, regardless of its publication status or user permissions.

### Run a query as a specific user with `AsUser`

To load content for a specific user, use `AsUser()` and pass an `IPrincipal` object with the user's identity and roles.

```csharp
IPrincipal user = GetUser();

var result = await _graphClient
    .QueryContent<BlogPostPage>()
    .Where(x => x.Author == "John Developer")
    .AsUser(user)
    .Limit(10)
    .GetAsContentAsync();
```

### Run a query as the current user with `AsCurrentUser`

To load content for the currently authenticated user, use `AsCurrentUser()`.

```csharp
var result = await _graphClient
    .QueryContent<BlogPostPage>()
    .Where(x => x.Author == "John Developer")
    .AsCurrentUser()
    .Limit(10)
    .GetAsContentAsync();
```

Both `AsCurrentUser()` and `AsUser()` use Basic authentication.

## Security best practices

Follow these practices to protect your credentials.

:::hint{type="danger"}
**Important**
Do not share API keys or secrets. If you contact Optimizely Support about a query issue, provide the `correlation-id` returned in the response instead of sharing credentials.

Store credentials using environment variables or a secure secrets manager. Do not commit credentials to source-controlled configuration files such as `appsettings.json`.
:::