23 lines
781 B
C#
23 lines
781 B
C#
using System.Linq;
|
|
using System.Threading.Tasks;
|
|
using LCU.Library.Internal.Security.Models.AccessPolicy;
|
|
using Microsoft.AspNetCore.Authorization;
|
|
|
|
namespace LCU.Library.Internal.Security;
|
|
|
|
public class GroupMembershipRequirementHandler : AuthorizationHandler<GroupMembershipRequirement>
|
|
{
|
|
protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, GroupMembershipRequirement requirement)
|
|
{
|
|
var groups = context.User.Claims.Where(c => c.Type == "groups")
|
|
.Concat(context.User.Claims.Where(c => c.Type == "roles"))
|
|
.Select(c => c.Value);
|
|
|
|
if (groups.Any(requirement.Groups.Contains))
|
|
{
|
|
context.Succeed(requirement);
|
|
}
|
|
|
|
return Task.CompletedTask;
|
|
}
|
|
} |