adding auth extension

Author: MWClayson-NHS

application/CohortManager/src/Functions/Shared/Common/Extensions/AuthenticationExtension.cs

@@ -0,0 +1,18 @@
+namespace Common;
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Hosting;
+
+public static class AuthenticationExtension
+{
+    public static IHostBuilder AddAuthentication(this IHostBuilder hostBuilder)
+    {
+
+        hostBuilder.AddConfiguration<AuthConfig>();
+        hostBuilder.ConfigureServices((context, services) =>
+        {
+            services.AddSingleton<IAuthenticationService, JWTAuthentication>();
+        });
+        return hostBuilder;
+     }
+}

application/CohortManager/src/Functions/screeningDataServices/GetValidationExceptions/GetValidationExceptions.cs

@@ -24,13 +24,15 @@ public class GetValidationExceptions
     private readonly IValidationExceptionData _validationData;
     private readonly IHttpParserHelper _httpParserHelper;
     private readonly IPaginationService<ValidationException> _paginationService;
+    private readonly IAuthenticationService _authenticationService;
 
-    public GetValidationExceptions(ILogger<GetValidationExceptions> logger, ICreateResponse createResponse, IValidationExceptionData validationData, IHttpParserHelper httpParserHelper, IPaginationService<ValidationException> paginationService)
+    public GetValidationExceptions(ILogger<GetValidationExceptions> logger, ICreateResponse createResponse, IValidationExceptionData validationData, IHttpParserHelper httpParserHelper, IPaginationService<ValidationException> paginationService, IAuthenticationService authenticationService)
     {
         _logger = logger;
         _createResponse = createResponse;
         _validationData = validationData;
         _httpParserHelper = httpParserHelper;
+        _authenticationService = authenticationService;
         _paginationService = paginationService;
     }
 
@@ -58,6 +60,13 @@ public async Task<HttpResponseData> Run([HttpTrigger(AuthorizationLevel.Anonymou
         var ruleId = _httpParserHelper.GetQueryParameterAsNullableInt(req, "ruleId");
         var dateCreated = _httpParserHelper.GetQueryParameterAsDateTime(req, "dateCreated");
 
+        var validated = await _authenticationService.ValidateAccess(req);
+
+        if(!validated)
+        {
+            return _createResponse.CreateHttpResponse(HttpStatusCode.Unauthorized, req, "Unauthorized access.");
+        }
+
         try
         {
             if (exceptionId > 0)

application/CohortManager/src/Functions/screeningDataServices/GetValidationExceptions/Program.cs

@@ -14,8 +14,8 @@
     .AddDataServicesHandler()
     .AddDataService<ExceptionManagement>(config.ExceptionManagementDataServiceURL)
     .AddDataService<ParticipantDemographic>(config.DemographicDataServiceURL)
-
     .Build()
+    .AddAuthentication()
     .ConfigureServices(services =>
     {
         services.AddTransient<IValidationExceptionData, ValidationExceptionData>();