Policy Based Authorization

ClapsController.cs

...

using Microsoft.AspNetCore.Authorization;

...

[Authorize]
[Route("api/[controller]")]
[ApiController]
public class ClapsController : ControllerBase
{
  ...

  // This policy will only apply to this specific route
  [Authorize(Policy = "Admin")]
  // GET api/claps/9000
  [HttpGet("{id}")]
  public ActionResult<int> GetClaps(int id)
  {
    // This will only return 9000 (ITS OVER 9000) if authenticated and is an Admin
    // Otherwise it will return a status code 401
    return id;
  }
}