创建使用服务的新AuthorizationHandler/IAuthorizationRequirement

Question

我正在尝试创建一个新的授权要求,但它必须使用我在ConfigureServices中声明的服务之一,并且我不知道如何将该服务以与声明服务相同的方法传递给新要求.

public class NewRequirement: AuthorizationHandler<NewRequirement>, IAuthorizationRequirement
{
    private IRepository _repository;

    public NewRequirement(IRepository repository)
    {
        _repository = repository;
    }

    protected override void Handle(AuthorizationContext context, NewRequirement requirement)
    {
        //code that uses _repository here
    }
}

这工作正常,但是当我尝试在Startup.cs中添加这样的策略时:

    public void ConfigureServices(IServiceCollection services)
    {
        ...

        services.AddSingleton<RepositoryContext>();
        services.AddScoped<IRepository, Repository>();

        services.Configure<AuthorizationOptions>(options =>
        {
            options.AddPolicy("NewRequirement", policy => policy.Requirements.Add(new NewRequirement()));
        });
    }

我收到这个错误

错误CS7036
没有给出的参数对应于'ExtraProjectRequirements.NewRequirement(IRepository)'
Reception.DNX 4.5.1 所需的形式参数'repository'.

我想我需要将IRepository传递给新策略,但我不知道如何在ConfigureServices中执行它.

Answer 1

您正在将处理程序传递给需求,这是错误的.IAuthorizationRequirement并且AuthorizationHandler<NewRequirement>需要是两个不同的类.也IAuthorizationRequirement只是一个没有任何强制属性或方法的标记接口,只是意外地将任意类添加到Requirements集合;)

在IAuthorizationRequirement将含有纯数据(读:没有服务,没有依赖需要注入)为您的要求需要,该处理程序将验证它.请参阅@blowdart示例及其Over18Requirement处理程序以及官方文档.

允许处理程序注入依赖项.

未来读者文档中的示例(如果链接不可用).

public class MinimumAgeRequirement : IAuthorizationRequirement
{
    public MinimumAgeRequirement(int age)
    {
        MinimumAge = age;
    }

    protected int MinimumAge { get; set; }
}

public class MinimumAgeHandler : AuthorizationHandler<MinimumAgeRequirement>
{
    protected override void Handle(AuthorizationContext context, MinimumAgeRequirement requirement)
    {
        if (!context.User.HasClaim(c => c.Type == ClaimTypes.DateOfBirth &&
                                   c.Issuer == "http://contoso.com"))
        {
            return;
        }

        var dateOfBirth = Convert.ToDateTime(context.User.FindFirst(
            c => c.Type == ClaimTypes.DateOfBirth && c.Issuer == "http://contoso.com").Value);

        int calculatedAge = DateTime.Today.Year - dateOfBirth.Year;
        if (dateOfBirth > DateTime.Today.AddYears(-calculatedAge))
        {
            calculatedAge--;
        }

        if (calculatedAge >= requirement.MinimumAge)
        {
            context.Succeed(requirement);
        }
    }
}