AuthorizationService.cs

Go to the documentation of this file.

using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;
 
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Http;
 
namespace Tgstation.Server.Host.Security
{
    sealed class AuthorizationService : IAuthorizationService
    {
        readonly IClaimsPrincipalAccessor claimsPrincipalAccessor;
 
        readonly Microsoft.AspNetCore.Authorization.IAuthorizationService aspNetCoreAuthorizationService;
 
        public AuthorizationService(
            IClaimsPrincipalAccessor claimsPrincipalAccessor,
            Microsoft.AspNetCore.Authorization.IAuthorizationService aspNetCoreAuthorizationService)
        {
            this.claimsPrincipalAccessor = claimsPrincipalAccessor ?? throw new ArgumentNullException(nameof(claimsPrincipalAccessor));
            this.aspNetCoreAuthorizationService = aspNetCoreAuthorizationService ?? throw new ArgumentNullException(nameof(aspNetCoreAuthorizationService));
        }
 
        public async ValueTask<AuthorizationResult> AuthorizeAsync(IEnumerable<IAuthorizationRequirement> requirements)
        {
            ArgumentNullException.ThrowIfNull(requirements);
 
            // asp net fails for an empty authorization requirement list
            var bakedRequirements = requirements.ToList();
            if (bakedRequirements.Count == 0)
                return AuthorizationResult.Success();
 
            var result = await aspNetCoreAuthorizationService.AuthorizeAsync(
                claimsPrincipalAccessor.User,
                null,
                bakedRequirements);
 
            return result;
        }
    }
}