auth layer implemented

2026-10-09 09:58:45 +05:30
parent 5b2ac8cc14
commit 558afc6f9d
22 changed files with 4731 additions and 82 deletions
@@ -1,23 +1,24 @@
-
-//namespace Distribution.Infra.Authorization;
+using Microsoft.AspNetCore.Authorization;

-//public class PermissionAuthorizationHandler : AuthorizationHandler<PermissionRequirement>
-//{
-//    private readonly IPermissionService _permissionService;
+namespace Distribution.Infra.Authorization;

-//    public PermissionAuthorizationHandler(IPermissionService permissionService)
-//    {
-//        _permissionService = permissionService;
-//    }
+public class PermissionAuthorizationHandler : AuthorizationHandler<PermissionRequirement>
+{
+    private readonly IPermissionService _permissionService;

-//    protected override async Task HandleRequirementAsync(
-//        AuthorizationHandlerContext context, PermissionRequirement requirement)
-//    {
-//        var roleIdClaim = context.User.FindFirst("role_id")?.Value;
-//        if (!Guid.TryParse(roleIdClaim, out var roleId))
-//            return;
+    public PermissionAuthorizationHandler(IPermissionService permissionService)
+    {
+        _permissionService = permissionService;
+    }

-//        if (await _permissionService.HasPermissionAsync(roleId, requirement.PermissionCode))
-//            context.Succeed(requirement);
-//    }
-//}
+    protected override async Task HandleRequirementAsync(
+        AuthorizationHandlerContext context, PermissionRequirement requirement)
+    {
+        var roleIdClaim = context.User.FindFirst("role_id")?.Value;
+        if (!Guid.TryParse(roleIdClaim, out var roleId))
+            return;
+
+        if (await _permissionService.HasPermissionAsync(roleId, requirement.PermissionCode))
+            context.Succeed(requirement);
+    }
+}
@@ -1,31 +1,32 @@
-//using Microsoft.Extensions.Options;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.Extensions.Options;

-//namespace Distribution.Infra.Authorization;
+namespace Distribution.Infra.Authorization;

-//public class PermissionPolicyProvider : IAuthorizationPolicyProvider
-//{
-//    private readonly DefaultAuthorizationPolicyProvider _fallback;
+public class PermissionPolicyProvider : IAuthorizationPolicyProvider
+{
+    private readonly DefaultAuthorizationPolicyProvider _fallback;

-//    public PermissionPolicyProvider(IOptions<AuthorizationOptions> options)
-//    {
-//        _fallback = new DefaultAuthorizationPolicyProvider(options);
-//    }
+    public PermissionPolicyProvider(IOptions<AuthorizationOptions> options)
+    {
+        _fallback = new DefaultAuthorizationPolicyProvider(options);
+    }

-//    public Task<AuthorizationPolicy> GetDefaultPolicyAsync() => _fallback.GetDefaultPolicyAsync();
+    public Task<AuthorizationPolicy> GetDefaultPolicyAsync() => _fallback.GetDefaultPolicyAsync();

-//    public Task<AuthorizationPolicy?> GetFallbackPolicyAsync() => _fallback.GetFallbackPolicyAsync();
+    public Task<AuthorizationPolicy?> GetFallbackPolicyAsync() => _fallback.GetFallbackPolicyAsync();

-//    public Task<AuthorizationPolicy?> GetPolicyAsync(string policyName)
-//    {
-//        if (policyName.Contains('.'))
-//        {
-//            var policy = new AuthorizationPolicyBuilder()
-//                .RequireAuthenticatedUser()
-//                .AddRequirements(new PermissionRequirement(policyName))
-//                .Build();
-//            return Task.FromResult<AuthorizationPolicy?>(policy);
-//        }
+    public Task<AuthorizationPolicy?> GetPolicyAsync(string policyName)
+    {
+        if (policyName.Contains('.'))
+        {
+            var policy = new AuthorizationPolicyBuilder()
+                .RequireAuthenticatedUser()
+                .AddRequirements(new PermissionRequirement(policyName))
+                .Build();
+            return Task.FromResult<AuthorizationPolicy?>(policy);
+        }

-//        return _fallback.GetPolicyAsync(policyName);
-//    }
-//}
+        return _fallback.GetPolicyAsync(policyName);
+    }
+}
@@ -1,12 +1,13 @@
-
-//namespace Distribution.Infra.Authorization;
+using Microsoft.AspNetCore.Authorization;

-//public class PermissionRequirement : IAuthorizationRequirement
-//{
-//    public string PermissionCode { get; }
+namespace Distribution.Infra.Authorization;

-//    public PermissionRequirement(string permissionCode)
-//    {
-//        PermissionCode = permissionCode;
-//    }
-//}
+public class PermissionRequirement : IAuthorizationRequirement
+{
+    public string PermissionCode { get; }
+
+    public PermissionRequirement(string permissionCode)
+    {
+        PermissionCode = permissionCode;
+    }
+}