private void CheckAccessToken(AuthorizationFilterContext context)
{
ObjectResult result = null;
if (!HasValidAuthorizationHeader(context))
{
result = ExceptionResponseHandler.GetUnauthorizedResponse(TokenRequiredError, context.HttpContext.Request);
context.Result = result;
}
else if (!HasValidSchema(context))
{
result = ExceptionResponseHandler.GetUnauthorizedResponse(SchemaError, context.HttpContext.Request);
context.Result = result;
}
else
{
var session = GetSession(context);
if (session == null)
{
result = ExceptionResponseHandler.GetUnauthorizedResponse(TokenError, context.HttpContext.Request);
context.Result = result;
}
else if (!IsInRole(session))
{
result = ExceptionResponseHandler.GetUnauthorizedResponse(AccessError, context.HttpContext.Request);
context.Result = result;
}
}
}
protected ObjectResult GetExceptionResponse(Exception exception, HttpRequest request)
{
var response = ExceptionResponseHandler.GetExceptionResponse(exception, request);
return(response);
}
