/// <summary>
/// Adds a request filter which checks if the required permission is given
/// </summary>
/// <param name="appHost"></param>
public static void Init(AppHostBase appHost)
{
appHost.RequestFilters.Add((req, res, dto) =>
{
string sessionId = req.GetPermanentSessionId();
IOAuthSession session = appHost.GetCacheClient().GetSession(sessionId);
ApplyTo httpMethod = req.HttpMethodAsApplyTo();
RequiredPermissionAttribute[] attributes = (RequiredPermissionAttribute[])dto.GetType().GetCustomAttributes(typeof(RequiredPermissionAttribute), true);
foreach (RequiredPermissionAttribute attribute in attributes)
{
if (attribute.ApplyTo.Has(httpMethod))
{
foreach (string requiredPermission in attribute.RequiredPermissions)
{
if (!session.HasPermission(requiredPermission))
{
res.StatusCode = (int)HttpStatusCode.Unauthorized;
res.Close();
return;
}
}
}
}
});
}
public static void AutoRegisterServices(AppHostBase appHost, params Assembly[] additionalAssemblies)
{
using (var serviceLoader = new DynamicServiceLoader(additionalAssemblies))
{
foreach (var servicePlugin in serviceLoader.PluginsFound)
{
Assembly asm = servicePlugin.GetType().Assembly;
appHost.AddPluginsFromAssembly(asm);
}
}
}
public static void AutoRegisterServices(AppHostBase appHost)
{
AutoRegisterServices(appHost, null);
}
