Interface IMillraceDashboardAuthorization
Decides who may reach the dashboard API (ARCHITECTURE.md §11.13).
public interface IMillraceDashboardAuthorization
Remarks
Registering an implementation is what satisfies the startup requirement: mounting the dashboard with no implementation registered throws outside Development, because the API exposes serialized job arguments — routinely personal data — and gains cancel, requeue and trigger actions in 0.4.
This runs on every dashboard request, including the OpenAPI document. Keep it cheap; it is not a place for a per-request database round trip unless you cache.
Methods
- AuthorizeAsync(HttpContext, CancellationToken)
Whether this request may proceed. Returning false yields
404, not403— an ops surface should not confirm its own existence to an unauthorized caller.