ayan.poddar/eShopOnContainers
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Correctly set scopes for AuthorizeCheckOperationFilter

Browse Source
This commit is contained in:
Reuben Bond 2023-05-08 11:23:08 -07:00
parent 3858d7ccf7
commit 9c2b972cc9
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/Services/Services.Common/AuthorizeCheckOperationFilter.cs
View File

@ -6,9 +6,11 @@ using Swashbuckle.AspNetCore.SwaggerGen;
namespace Services.Common;
internal class AuthorizeCheckOperationFilter : IOperationFilter
{
private readonly IConfiguration _configuration;
public AuthorizeCheckOperationFilter(IConfiguration configuration)
{
_configuration = configuration;
}
public void Apply(OpenApiOperation operation, OperationFilterContext context)
@ -27,11 +29,14 @@ internal class AuthorizeCheckOperationFilter : IOperationFilter
Reference = new OpenApiReference { Type = ReferenceType.SecurityScheme, Id = "oauth2" }
};
var identitySection = _configuration.GetSection("Identity");
var scopes = identitySection.GetRequiredSection("Scopes").GetChildren().Select(r => r.Key).ToArray();
operation.Security = new List<OpenApiSecurityRequirement>
{
new()
{
[ oAuthScheme ] = new [] { "basketapi" }
[ oAuthScheme ] = scopes
}
};
}