Custom authorization attribute for Hotchocolate.Authorization

Product

Hot Chocolate

Is your feature request related to a problem?

Policies in some cases are not handy as custom attributes with parameters such as [AuthorizeAge(22)] on Queries or Mutation

The solution you'd like

Make it possibile to write custom authorize attributes like microsoft Authorization

public class AuthorizeAgeAttribute : TypeFilterAttribute
{
    public AuthorizeAgeAttribute(int age) : base(typeof(AuthorizeAge))
    {
        Arguments = new object[] { age };
    }
}
public class AuthorizeAge : IAuthorizationFilter
{
    private readonly int _age;
    private readonly IUserService _userService;

    public AuthorizeMacroAndMicro(int age, IUserService userService)
    {
        _age = age;
        _userService = userService;
    }

    public void OnAuthorization(AuthorizationFilterContext context)
    {
        if (_userService.Age < _age)
            context.Result = new ForbidResult();
    }
}

And being able to use it in mutation or queries like:

 [ExtendObjectType("Query")]
 public class HorrorFilmsQueryResolver
 {
     public HorrorFilmsQueryResolver() { }

     [GraphQLName("HorrorFilms")]
     [AuthorizeAge(18)]
     public Task<IEnumerable<Film>> Get([Service] IHorrorFilmsService filmService) => filmService.GetAll();

 }

No repository file or test is named. Start by tracing Hot Chocolate authorization support and its handling of attributes on the example Query or mutation entry points, then review existing authorization tests if available; done means a parameterized custom attribute can be applied to a resolver and enforce the requested authorization decision.