using Microsoft.AspNetCore.Authorization; using Microsoft.AspNetCore.Mvc; namespace OAuthServer.Controllers; [ApiController] [Route("")] public class UserController : ControllerBase { [HttpGet] [Authorize(Policy = "User")] [Route("/auth/user")] public ActionResult TestAuth() { return Ok("Authorized as User"); } }