private static void RegisterAuthorizationPolicy(IServiceCollection services)
        {
            services.AddAuthorization(options =>
            {
                var mustContainUpnClaimRequirement = new MustBeValidUpnRequirement();
                options.AddPolicy(
                    PolicyNames.MustBeValidUpnPolicy,
                    policyBuilder => policyBuilder.AddRequirements(mustContainUpnClaimRequirement));
            });

            services.AddSingleton <IAuthorizationHandler, MustBeValidUpnHandler>();
        }
Beispiel #2
0
        private static void RegisterAuthorizationPolicy(IServiceCollection services)
        {
            services.AddAuthorization(options =>
            {
                //var defaultAuthorizationPolicyBuilder = new AuthorizationPolicyBuilder(
                //    JwtBearerDefaults.AuthenticationScheme,
                //    PolicyNames.AtWorkRioIdentity)
                //    .RequireAuthenticatedUser()
                //    .Build();
                //options.DefaultPolicy = defaultAuthorizationPolicyBuilder;

                var mustContainUpnClaimRequirement = new MustBeValidUpnRequirement();
                options.AddPolicy(
                    PolicyNames.MustBeValidUpnPolicy,
                    policyBuilder => policyBuilder.AddRequirements(mustContainUpnClaimRequirement));
            });

            services.AddSingleton <IAuthorizationHandler, MustBeValidUpnHandler>();
        }
        private static void RegisterAuthorizationPolicy(IServiceCollection services)
        {
            services.AddAuthorization(options =>
            {
                var mustContainUpnClaimRequirement = new MustBeValidUpnRequirement();
                options.AddPolicy(
                    PolicyNames.MustBeValidUpnPolicy,
                    policyBuilder => policyBuilder
                    .AddRequirements(mustContainUpnClaimRequirement)
                    .RequireAuthenticatedUser()
                    .Build());
                options.AddPolicy(
                    PolicyNames.MSGraphGroupDataPolicy,
                    policyBuilder => policyBuilder
                    .AddRequirements(new MSGraphScopeRequirement(new string[] { Common.Constants.ScopeGroupReadAll }))
                    .RequireAuthenticatedUser()
                    .Build());
            });

            services.AddScoped <IAuthorizationHandler, MustBeValidUpnHandler>();
            services.AddScoped <IAuthorizationHandler, MSGraphScopeHandler>();
        }
        private static void RegisterAuthorizationPolicy(IServiceCollection services, IConfiguration configuration)
        {
            var graphGroupDatascope = configuration.GetValue <string>("GroupsGraphScope");

            services.AddAuthorization(options =>
            {
                var mustContainUpnClaimRequirement = new MustBeValidUpnRequirement();
                options.AddPolicy(
                    PolicyNames.MustBeValidUpnPolicy,
                    policyBuilder => policyBuilder
                    .AddRequirements(mustContainUpnClaimRequirement)
                    .RequireAuthenticatedUser()
                    .Build());
                options.AddPolicy(
                    PolicyNames.MSGraphGroupDataPolicy,
                    policyBuilder => policyBuilder
                    .AddRequirements(new MSGraphScopeRequirement(new string[] { graphGroupDatascope }))
                    .RequireAuthenticatedUser()
                    .Build());
            });

            services.AddScoped <IAuthorizationHandler, MustBeValidUpnHandler>();
            services.AddScoped <IAuthorizationHandler, MSGraphScopeHandler>();
        }