How is authorization implemented?

Authorization is usually implemented through access rights verification after successful authentication. In C#, ASP.NET Identity or JWT (JSON Web Tokens) are often used to manage sessions and permissions.

Example using JWT:

// Token generation
var tokenHandler = new JwtSecurityTokenHandler();
var key = Encoding.ASCII.GetBytes("secret_key");
var tokenDescriptor = new SecurityTokenDescriptor
{
    Subject = new ClaimsIdentity(new Claim[]
    {
        new Claim(ClaimTypes.Name, user.Id.ToString()),
        new Claim(ClaimTypes.Role, user.Role)
    }),
    Expires = DateTime.UtcNow.AddHours(1),
    SigningCredentials = new SigningCredentials(new SymmetricSecurityKey(key), SecurityAlgorithms.HmacSha256Signature)
};
var token = tokenHandler.CreateToken(tokenDescriptor);
var tokenString = tokenHandler.WriteToken(token);

// Token validation in middleware
// ...

Thus, after authentication, the client receives a token, which is sent in request headers to access protected resources.