Browse Source

feat: enable customizable authorization checks via method-level service invocation

Introduced an extension point to allow consumers to implement their own authorization logic while preserving existing framework-level checks. This change enables method-level authorization to be overridden or extended through DI-friendly services, addressing the limitation caused by non-virtual methods and providing a clean, maintainable customization path.
pull/24424/head
Biraj Mainali 4 months ago
parent
commit
d7e16368e7
  1. 2
      framework/src/Volo.Abp.Authorization/Volo/Abp/Authorization/MethodInvocationAuthorizationService.cs

2
framework/src/Volo.Abp.Authorization/Volo/Abp/Authorization/MethodInvocationAuthorizationService.cs

@ -20,7 +20,7 @@ public class MethodInvocationAuthorizationService : IMethodInvocationAuthorizati
_abpAuthorizationService = abpAuthorizationService;
}
public async Task CheckAsync(MethodInvocationAuthorizationContext context)
public virtual async Task CheckAsync(MethodInvocationAuthorizationContext context)
{
if (AllowAnonymous(context))
{

Loading…
Cancel
Save