Merge pull request #183 from crupest/auth

Refactor auth module to enable more flexiable permission control.

1 files changed, 6 insertions, 4 deletions

diff --git a/BackEnd/Timeline/Auth/PrincipalExtensions.cs b/BackEnd/Timeline/Auth/PrincipalExtensions.cs
index ad7a887f..9f86e8ac 100644
--- a/BackEnd/Timeline/Auth/PrincipalExtensions.cs
+++ b/BackEnd/Timeline/Auth/PrincipalExtensions.cs
@@ -1,13 +1,15 @@
-using System.Security.Principal;

-using Timeline.Entities;

+using System;

+using System.Security.Claims;

+using Timeline.Services;

 

 namespace Timeline.Auth

 {

     internal static class PrincipalExtensions

     {

-        internal static bool IsAdministrator(this IPrincipal principal)

+        internal static bool HasPermission(this ClaimsPrincipal principal, UserPermission permission)

         {

-            return principal.IsInRole(UserRoles.Admin);

+            return principal.HasClaim(

+                claim => claim.Type == AuthenticationConstants.PermissionClaimName && string.Equals(claim.Value, permission.ToString(), StringComparison.InvariantCultureIgnoreCase));

         }

     }

 }