40 lines
1.3 KiB
C#
40 lines
1.3 KiB
C#
using System.Security.Claims;
|
||
|
||
namespace FileShare_Services.Core
|
||
{
|
||
/// <summary>
|
||
/// 鉴权服务抽象 —— 各宿主按自己的方式实现（JWT / Cookie / Token 等）。
|
||
/// </summary>
|
||
public interface IAuthService
|
||
{
|
||
/// <summary>
|
||
/// 验证请求并返回用户主体；返回 null 表示未授权。
|
||
/// </summary>
|
||
Task<ClaimsPrincipal?> AuthenticateAsync(ServiceEndpointContext context);
|
||
|
||
/// <summary>
|
||
/// 检查当前用户是否有指定权限。
|
||
/// </summary>
|
||
Task<bool> AuthorizeAsync(ClaimsPrincipal user, string policy);
|
||
}
|
||
|
||
/// <summary>
|
||
/// 无需鉴权的默认实现（开发/公开 API 场景）。
|
||
/// </summary>
|
||
public sealed class AnonymousAuthService : IAuthService
|
||
{
|
||
/// <inheritdoc />
|
||
public Task<ClaimsPrincipal?> AuthenticateAsync(ServiceEndpointContext context)
|
||
{
|
||
// 匿名用户，始终通过
|
||
var identity = new ClaimsIdentity("anonymous");
|
||
return Task.FromResult<ClaimsPrincipal?>(new ClaimsPrincipal(identity));
|
||
}
|
||
/// <inheritdoc />
|
||
public Task<bool> AuthorizeAsync(ClaimsPrincipal user, string policy)
|
||
{
|
||
return Task.FromResult(true);
|
||
}
|
||
}
|
||
}
|