Azure Functions - In-Process Authorization

[dhaligas]

Here is an example HttpTrigger on how to get the [Authorize] directive working with Azure Functions.

[FunctionName("HttpExample")]
public async Task<IActionResult> Run(
    [HttpTrigger(AuthorizationLevel.Anonymous, "get", "post", Route = "graphql")] HttpRequest req,
    [GraphQL] IGraphQLRequestExecutor executor, 
    ILogger log)
{
    var auth = await req.HttpContext.AuthenticateAsync();

    if (auth.Principal != null)
        req.HttpContext.User = auth.Principal;

    log.LogInformation("C# HTTP trigger function processed a request.");

    return await executor.ExecuteAsync(req);
}

The key is getting the ClaimsPrincipal from invoking AuthenticateAsync and setting it into the HttpContext.User. This is where HotChocolate is expecting this to be populated.

var auth = await req.HttpContext.AuthenticateAsync();

if (auth.Principal != null)
{
    req.HttpContext.User = auth.Principal;
}