From 6e97444df9c8212cef3f9fc10c51e99383d4c437 Mon Sep 17 00:00:00 2001
From: George Drak <sonicgd@gmail.com>
Date: Wed, 18 Oct 2023 22:21:15 +0500
Subject: [PATCH] feat(auth): add policy helpers

---
 src/Sitko.Core.Auth/AuthOptions.cs | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/src/Sitko.Core.Auth/AuthOptions.cs b/src/Sitko.Core.Auth/AuthOptions.cs
index b0c638d14..c3bdd7f05 100644
--- a/src/Sitko.Core.Auth/AuthOptions.cs
+++ b/src/Sitko.Core.Auth/AuthOptions.cs
@@ -23,6 +23,25 @@ public abstract class AuthOptions : BaseModuleOptions
     public int CookieExpireInMinutes { get; set; } = 30 * 24 * 60;
     public string UserIdClaimName { get; set; } = ClaimTypes.NameIdentifier;
     [JsonIgnore] public Action<CookieBuilder>? ConfigureCookie { get; set; }
+
+    public AuthOptions AddPolicy(string name, Func<AuthorizationPolicyBuilder, AuthorizationPolicyBuilder> policyBuilder,
+        bool forcePolicy = false)
+    {
+        var builder = new AuthorizationPolicyBuilder();
+        var policy = policyBuilder(builder).Build();
+        return AddPolicy(name, policy, forcePolicy);
+    }
+
+    public AuthOptions AddPolicy(string name, AuthorizationPolicy policy, bool forcePolicy = false)
+    {
+        Policies.Add(name, policy);
+        if (forcePolicy)
+        {
+            ForcePolicy = name;
+        }
+
+        return this;
+    }
 }
 
 public abstract class AuthOptionsValidator<TOptions> : AbstractValidator<TOptions> where TOptions : AuthOptions
@@ -37,4 +56,3 @@ protected AuthOptionsValidator()
             .WithMessage("Can't use -1 database for data protection");
     }
 }
-