The values of Roles property in AuthorizeAttribute aren't trimmed

[phenixdotnet]

Hi.

Actually in the asp.net 5 (1.0.0-rc1-final) the values of the Roles property in Authorize attribute aren't trimmed before using it.
This lead to the situation where if for any reason you have this code:

[Authorize(Roles="user, admin")]
public class MyController : Controller
{
}

Users with the admin role will never be authorized because the role name will be evaluated to " admin" and not "admin".

I can work on a patch and submit it if you want.

Regards

[HaoK]

Sure, if you want to submit a PR to fix this, that would be great :)

[phenixdotnet]

Hi.

PR submitted (#634)

Regards

[HaoK]

a8ef4df