Startup.cs

// Licensed to the .NET Foundation under one or more agreements.
// The .NET Foundation licenses this file to you under the MIT license.

using Microsoft.AspNetCore.Authentication.Cookies;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Hosting;
using Microsoft.Extensions.DependencyInjection;
using Microsoft.Extensions.Hosting;

namespace CustomPolicyProvider;

public class Startup
{
    public void ConfigureServices(IServiceCollection services)
    {
        // Replace the default authorization policy provider with our own
        // custom provider which can return authorization policies for given
        // policy names (instead of using the default policy provider)
        services.AddSingleton<IAuthorizationPolicyProvider, MinimumAgePolicyProvider>();

        // As always, handlers must be provided for the requirements of the authorization policies
        services.AddSingleton<IAuthorizationHandler, MinimumAgeAuthorizationHandler>();

        services.AddMvc();

        // Add cookie authentication so that it's possible to sign-in to test the
        // custom authorization policy behavior of the sample
        services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
            .AddCookie(options =>
            {
                options.AccessDeniedPath = "/account/denied";
                options.LoginPath = "/account/signin";
            });
    }

    public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
    {
        app.UseRouting();

        app.UseAuthentication();
        app.UseAuthorization();

        app.UseEndpoints(endpoints =>
        {
            endpoints.MapDefaultControllerRoute();
        });
    }
}