policies-based-authorization

What problem does it solve?

Centralizes and standardizes authorization across ASP.NET Core apps by enabling policy-based access control with reusable requirements and handlers.

Core Features & Use Cases

• Define reusable IAuthorizationRequirement and IAuthorizationHandler components.
• Register policies via services.AddAuthorization and enforce them with [Authorize(Policy = "...")] or RequireAuthorization.
• Create single or multiple handlers for OR/AND evaluation and easily test authorization logic.
• Use the Resource/HttpContext in handlers to tailor policy evaluation to the current request.

Quick Start

Enable policy-based authorization in a new ASP.NET Core app by configuring services:

• In Program.cs or Startup.cs, add services.AddAuthorization(...);
• Create a MinimumAgeRequirement and a MinimumAgeHandler, register them in DI, and apply a policy with [Authorize(Policy = "AtLeast21")];
• Build and run, then test with a user that satisfies the policy.