add roles management for api accessibility

Author: damienmoulard

Diff for: Zenergy/Zenergy/Controllers/ApiControllers/membersController.cs

@@ -13,6 +13,7 @@
 
 namespace Zenergy.Controllers.ApiControllers
 {
+    [Authorize]
     public class membersController : ApiController
     {
         private ZenergyContext db = new ZenergyContext();

Diff for: Zenergy/Zenergy/Controllers/ApiControllers/usersController.cs

@@ -14,6 +14,7 @@
 
 namespace Zenergy.Controllers.ApiControllers
 {
+    [Authorize]
     public class usersController : ApiController
     {
         private ZenergyContext db = new ZenergyContext();
@@ -25,14 +26,12 @@ public usersController()
         }
 
         // GET: api/users
-        [Authorize]
         public IQueryable<user> Getuser()
         {
             return db.user;
         }
 
         // GET: api/users/5
-        //[Authorize(Roles = "Admin")]
         [ResponseType(typeof(user))]
         public async Task<IHttpActionResult> Getuser(int id)
         {
@@ -55,7 +54,6 @@ public async Task<IHttpActionResult> findByMail(string userMail)
             {
                 return NotFound();
             }
-
             return Ok(user);
         }
 

Diff for: Zenergy/Zenergy/Providers/ApplicationOAuthProvider.cs

@@ -51,7 +51,7 @@ public override async Task GrantResourceOwnerCredentials(OAuthGrantResourceOwner
             identity.AddClaim(new Claim("mail", context.UserName));
             identity.AddClaim(new Claim("role", "user"));
             identity.AddClaim(new Claim(ClaimTypes.Name, context.UserName));
-            /*
+            
             if (user.member != null)
             {
                 identity.AddClaim(new Claim(ClaimTypes.Role, "Member"));
@@ -67,7 +67,7 @@ public override async Task GrantResourceOwnerCredentials(OAuthGrantResourceOwner
             if (user.admin != null)
             {
                 identity.AddClaim(new Claim(ClaimTypes.Role, "Admin"));
-            }       */
+            }
 
             AuthenticationProperties properties = CreateProperties(user.mail);
             AuthenticationTicket ticket = new AuthenticationTicket(identity, properties);