From 69fdb530a25ab1f018aec45b3aa161d3274ce488 Mon Sep 17 00:00:00 2001
From: Berkan Sasmaz <berkansasmazz@gmail.com>
Date: Fri, 30 Jul 2021 16:24:29 +0300
Subject: [PATCH] feat(Volo.Abp.HangFire): Add dashboard authorization for
 Hangfire

---
 .../Volo.Abp.HangFire.csproj                  |  1 +
 .../AbpHangfireAuthorizationFilter.cs         | 46 +++++++++++++++++++
 .../Volo/Abp/Hangfire/AbpHangfireModule.cs    |  2 +
 3 files changed, 49 insertions(+)
 create mode 100644 framework/src/Volo.Abp.HangFire/Volo/Abp/Hangfire/AbpHangfireAuthorizationFilter.cs

diff --git a/framework/src/Volo.Abp.HangFire/Volo.Abp.HangFire.csproj b/framework/src/Volo.Abp.HangFire/Volo.Abp.HangFire.csproj
index 4ec9d0a3b5..6b598d0edd 100644
--- a/framework/src/Volo.Abp.HangFire/Volo.Abp.HangFire.csproj
+++ b/framework/src/Volo.Abp.HangFire/Volo.Abp.HangFire.csproj
@@ -19,6 +19,7 @@
   </ItemGroup>
 
   <ItemGroup>
+    <ProjectReference Include="..\Volo.Abp.Authorization.Abstractions\Volo.Abp.Authorization.Abstractions.csproj" />
     <ProjectReference Include="..\Volo.Abp.Core\Volo.Abp.Core.csproj" />
   </ItemGroup>
 
diff --git a/framework/src/Volo.Abp.HangFire/Volo/Abp/Hangfire/AbpHangfireAuthorizationFilter.cs b/framework/src/Volo.Abp.HangFire/Volo/Abp/Hangfire/AbpHangfireAuthorizationFilter.cs
new file mode 100644
index 0000000000..15fbb4f60c
--- /dev/null
+++ b/framework/src/Volo.Abp.HangFire/Volo/Abp/Hangfire/AbpHangfireAuthorizationFilter.cs
@@ -0,0 +1,46 @@
+using System;
+using System.Threading.Tasks;
+using Hangfire.Dashboard;
+using Microsoft.Extensions.DependencyInjection;
+using Volo.Abp.Authorization.Permissions;
+using Volo.Abp.Users;
+
+namespace Volo.Abp.Hangfire
+{
+    public class AbpHangfireAuthorizationFilter : IDashboardAsyncAuthorizationFilter
+    {
+        private readonly string _requiredPermissionName;
+
+        public AbpHangfireAuthorizationFilter(string requiredPermissionName = null)
+        {
+            _requiredPermissionName = requiredPermissionName;
+        }
+
+        public async Task<bool> AuthorizeAsync(DashboardContext context)
+        {
+            if (!IsLoggedIn(context))
+            {
+                return false;
+            }
+
+            if (_requiredPermissionName.IsNullOrEmpty())
+            {
+                return true;
+            }
+
+            return await IsPermissionGrantedAsync(context, _requiredPermissionName);
+        }
+
+        private static bool IsLoggedIn(DashboardContext context)
+        {
+            var currentUser = context.GetHttpContext().RequestServices.GetRequiredService<ICurrentUser>();
+            return currentUser.IsAuthenticated;
+        }
+
+        private static async Task<bool> IsPermissionGrantedAsync(DashboardContext context, string requiredPermissionName)
+        {
+            var permissionChecker = context.GetHttpContext().RequestServices.GetRequiredService<IPermissionChecker>();
+            return await permissionChecker.IsGrantedAsync(requiredPermissionName);
+        }
+    }
+}
\ No newline at end of file
diff --git a/framework/src/Volo.Abp.HangFire/Volo/Abp/Hangfire/AbpHangfireModule.cs b/framework/src/Volo.Abp.HangFire/Volo/Abp/Hangfire/AbpHangfireModule.cs
index d69edb0b5d..1628d2f37f 100644
--- a/framework/src/Volo.Abp.HangFire/Volo/Abp/Hangfire/AbpHangfireModule.cs
+++ b/framework/src/Volo.Abp.HangFire/Volo/Abp/Hangfire/AbpHangfireModule.cs
@@ -1,10 +1,12 @@
 using Hangfire;
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Options;
+using Volo.Abp.Authorization;
 using Volo.Abp.Modularity;
 
 namespace Volo.Abp.Hangfire
 {
+    [DependsOn(typeof(AbpAuthorizationAbstractionsModule))]
     public class AbpHangfireModule : AbpModule
     {
         private BackgroundJobServer _backgroundJobServer;