Example #1
0
 public HospitalsController(ApplicationDbContext context,
                            Microsoft.AspNetCore.Authorization.IAuthorizationService authorizationService,
                            UserManager <ApplicationUser> userManager, IConfiguration configuration)
     : base(context, authorizationService, userManager)
 {
     _configuration = configuration;
 }
        public async Task <IActionResult> Get(int id, [FromServices] Microsoft.AspNetCore.Authorization.IAuthorizationService authorizationService)
        {
            Order order = orderService.Get(id);

            var authorizationResult = await authorizationService.AuthorizeAsync(User, order, new TheSameAuthorRequirement());

            if (authorizationResult.Succeeded)
            {
                return(Ok(order));
            }
            else if (User.Identity.IsAuthenticated)
            {
                return(Forbid());
            }
            else
            {
                return(Challenge());
            }
        }