add roles seeding

api/Program.cs

@@ -46,16 +46,13 @@ builder.Services.AddAuthentication(options => {
     };
 });
 
-// TODO: adding roles doesnt work atm because roles need to be seeded in the database first
-// maybe programamatically checking them at startup like if(roleManager_.FindAsync("Admin") == null { roleManager_.addAsync("Admin"); })
-// or something 
 builder.Services.AddAuthorization(options => {
-    options.AddPolicy("RequireAdmin", policy => {
-        policy.RequireRole("Admin", "Superuser");
-    });
-    options.AddPolicy("RequireSuperuser", policy => {
-        policy.RequireRole("Superuser");
-    });
+
+    options.AddPolicy("SensitiveDataRead", policy =>
+        policy.RequireRole("admin", "superuser"));
+    options.AddPolicy("SensitiveDataModify", policy =>
+        policy.RequireRole("superuser"));
+
 });
 
 // configuration for behind my nginx proxy
@@ -123,6 +120,18 @@ using (var scope = app.Services.CreateScope()) {
             Thread.Sleep(5000);
         }
     }
+
+    // TODO: abstract this away
+    // auto seed Identity roles
+    var roleManager = scope.ServiceProvider.GetRequiredService<RoleManager<IdentityRole>>();
+    string[] roles = { "guest", "user", "dev", "mod", "admin", "superuser", "role1", "role2" };
+    foreach(string role in roles) {
+        if(!await roleManager.RoleExistsAsync(role)) {
+            await roleManager.CreateAsync(new IdentityRole(role));
+        }
+    }
+
+
 }
 
 app.Run();