PostAuthorizationHandlerTests2.cs

[Fact]
[Trait("Category", Category)]
public async void HandleDelete_WhenCalledWithNonResourceOwner_ShouldFail()
{
    var resource = make_PostDefault();
    var authorizationModel = PostAuthorizationModel.From(resource);
    //we use an invalid user this time
    var user = new ClaimsPrincipal(new ClaimsIdentity(new List<Claim> { new Claim("sub", InvalidUserIdDefault.ToString()) }));
    var requirement = PostOperations.Delete;
    var authorizationContext = new AuthorizationHandlerContext(new List<IAuthorizationRequirement> { requirement }, user, authorizationModel);
    var authorizationHandler = new PostAuthorizationHandler();

    await authorizationHandler.HandleAsync(authorizationContext);

    Assert.False(authorizationContext.HasSucceeded);
}