AuthenticationHandler در مقابل AuthorizationHandler

public class ApiKeyAuthenticationHandler : AuthenticationHandler<ApiKeyOptions>
{
    protected override Task<AuthenticateResult> HandleAuthenticateAsync()
    {
        if (!Request.Headers.TryGetValue("X-Api-Key", out var key))
            return Task.FromResult(AuthenticateResult.Fail("Missing API Key"));
        var identity = new ClaimsIdentity("ApiKey");
        return Task.FromResult(AuthenticateResult.Success(
            new AuthenticationTicket(new ClaimsPrincipal(identity), Scheme.Name)));
    }
}

public class OwnerRequirementHandler : AuthorizationHandler<OwnerRequirement, Order>
{
    protected override Task HandleRequirementAsync(
        AuthorizationHandlerContext context, OwnerRequirement req, Order order)
    {
        if (order.OwnerId == context.User.GetUserId())
            context.Succeed(req);
        return Task.CompletedTask;
    }
}