Resource Authorization Case

Example.cs

[HttpGet("{id}", Name = "GetBlog")]
        public async Task<IActionResult> Get(string id)
        {

            if (!ObjectId.TryParse(id, out var objectId))
                return BadRequest($"The id provided ({id}) is not a valid id.");

            try
            {
                var blog = await _blogDataService.FindBlogByIdAsync(objectId);

                if (blog == null)
                    return NotFound($"A blog with id '{id}' could not be found.");

                var authorizationResult =
                    await _authorizeService.AuthorizeAsync(User, blog.OwnerId, new ResourceOwnerRequirement());

                if (authorizationResult.Succeeded)
                    return Ok(_blogFactory.CreateReadContractFromBlog(blog));

                return Forbid();

            }
            catch (QueryException)
            {
                return NotFound();
            }
            catch (PersistanceException)
            {
                return StatusCode(500);
            }
            catch (Exception)
            {
                return StatusCode(500);
            }
        }