Add signup/signin with backend-issued JWT (Argon2 passwords in SurrealDB), role-based authorization policies, per-user data access levels, consent register and read audit log. Protect user endpoints and record sensitive reads.
13 lines
353 B
C#
13 lines
353 B
C#
using System.Security.Claims;
|
|
|
|
namespace TarninaHub.Application.Security;
|
|
|
|
public static class ClaimsPrincipalExtensions
|
|
{
|
|
public static string? GetUserId(this ClaimsPrincipal principal) =>
|
|
principal.FindFirst("sub")?.Value;
|
|
|
|
public static string? GetRole(this ClaimsPrincipal principal) =>
|
|
principal.FindFirst("role")?.Value;
|
|
}
|