Add JWT authentication and authorization infrastructure

Distribution/Infra/Auth/PermissionAuthorizationHandler.cs

@@ -0,0 +1,25 @@
+using Microsoft.AspNetCore.Authorization;
+
+namespace Distribution.Infra.Auth
+{
+    public class PermissionAuthorizationHandler : AuthorizationHandler<PermissionRequirement>
+    {
+        private readonly IPermissionService _permissionService;
+
+        public PermissionAuthorizationHandler(IPermissionService permissionService)
+        {
+            _permissionService = permissionService;
+        }
+
+        protected override async Task HandleRequirementAsync(
+            AuthorizationHandlerContext context, PermissionRequirement requirement)
+        {
+            var roleIdClaim = context.User.FindFirst("role_id")?.Value;
+            if (!Guid.TryParse(roleIdClaim, out var roleId))
+                return;
+
+            if (await _permissionService.HasPermissionAsync(roleId, requirement.PermissionCode))
+                context.Succeed(requirement);
+        }
+    }
+}