Refactor app architecture and clean local artifacts

2026-06-24 23:43:14 +02:00
parent 17134b3b82
commit fef1d36fe8
274 changed files with 37724 additions and 6065 deletions
@@ -0,0 +1,23 @@
+using Backend.Services;
+
+namespace Backend.Security;
+
+public sealed class AdminSessionFilter(IUserSessionService userSessionService) : IEndpointFilter
+{
+    public async ValueTask<object?> InvokeAsync(EndpointFilterInvocationContext context, EndpointFilterDelegate next)
+    {
+        var session = await userSessionService.ResolveSessionAsync(context.HttpContext, context.HttpContext.RequestAborted);
+        if (session is null)
+        {
+            return Results.Unauthorized();
+        }
+
+        if (!AdminRoles.CanAccessAdmin(session.Role))
+        {
+            return Results.Json(new { message = "Admin access requires an elevated role." }, statusCode: StatusCodes.Status403Forbidden);
+        }
+
+        context.HttpContext.SetCurrentSession(session);
+        return await next(context);
+    }
+}