Add AD auth and B1 currency fields

2026-04-29 11:07:35 +02:00
parent 3ac03a4782
commit 4a1561d85f
29 changed files with 1016 additions and 31 deletions
@@ -0,0 +1,32 @@
+using Microsoft.AspNetCore.Authorization;
+
+namespace TrafagSalesExporter.Security;
+
+public static class SecurityPolicyFactory
+{
+    public static AuthorizationPolicy BuildAccessPolicy(SecurityOptions settings, bool useDevelopmentAuthentication)
+    {
+        var builder = new AuthorizationPolicyBuilder()
+            .RequireAuthenticatedUser();
+
+        if (!useDevelopmentAuthentication && settings.AccessGroups.Count > 0)
+        {
+            builder.RequireAssertion(context =>
+                settings.AccessGroups.Any(group => context.User.IsInRole(group)));
+        }
+
+        return builder.Build();
+    }
+
+    public static AuthorizationPolicy BuildAdminPolicy(SecurityOptions settings, bool useDevelopmentAuthentication)
+    {
+        var builder = new AuthorizationPolicyBuilder()
+            .RequireAuthenticatedUser();
+
+        builder.RequireAssertion(context =>
+            useDevelopmentAuthentication && context.User.HasClaim(DevelopmentAuthenticationHandler.AdminClaimType, "true") ||
+            settings.AdminGroups.Any(group => context.User.IsInRole(group)));
+
+        return builder.Build();
+    }
+}