Require Authorization Without Checking Roles about authorization HOT 5 CLOSED

I was looking for the same, I ended up with the solution below:

public class AuthenticatedAuthorizationRequirement : IAuthorizationRequirement
{
  public Task Authorize(AuthorizationContext context)
  {
    if (!context.User.Identity.IsAuthenticated) {
      context.ReportError("Not authenticated");
    }

    return Task.CompletedTask;
  }
}

And add below to list of policies:

_.AddPolicy("AuthenticatedPolicy", p => p.AddRequirement(new AuthenticatedAuthorizationRequirement()));

Hope this helps!

from authorization.

@ganhammar I'm in same situation how to check user identity is authenticated ? before adding authorization on graphtype, I'm using default Authorize as it uses in controller

If I add below in valdation rule and setting back to context is working, is there any other way to check request is authenticated?
var httpContext = _httpContextAccessor.HttpContext;
var result1 = await httpContext.AuthenticateAsync("Bearer");
_httpContextAccessor.HttpContext.User = result1.Principal;

from authorization.

See #49 (comment) for a slightly longer example, but as @ganhammar showed, IAuthorizationRequirement is likely what you'd be looking for.

from authorization.

@kmanev073 This issue has already been resolved. Now you can use this requirement and that builder method.

from authorization.

Closed as resolved.

from authorization.