aspnetcore authorization

AccountController.cs

namespace Demo.WebApi.Controllers
{
    // SIMPLE AUTHORIZATION
    [Authorize]
    [Route("api/[controller]")]
    public class AccountController : Controller
    {
        public AccountController()
        {
        }
        
        // ROLE-BASED AUTHORIZATION
        [Authorize(Roles = "Administrator")]
        [HttpGet("all")]
        public async Task<IActionResult> GetAll()
        {
          return Ok();
        }
        
        // POLICY-BASED AUTHORIZATION
        // CLAIM-BASE AUTHORIZATION (inherit from POLICY-BASED AUTHORIZATION)
        [Authorize(Policy = "EmployeeOnly")]
        [HttpGet("all")]
        public async Task<IActionResult> GetAll()
        {
          return Ok();
        }
}