Simplify policy setup

Author: localden

samples/ProtectedMCPServer/Program.cs

@@ -77,10 +77,7 @@
 // Add authorization services
 builder.Services.AddAuthorization(options =>
 {
-    options.AddPolicy(McpAuthenticationDefaults.AuthenticationScheme, policy =>
-    {
-        policy.RequireAuthenticatedUser();
-    });
+    options.AddMcpPolicy();
 });
 
 // Configure MCP Server

src/ModelContextProtocol.AspNetCore/Auth/McpAuthorizationPolicyExtensions.cs

@@ -0,0 +1,36 @@
+using Microsoft.AspNetCore.Authorization;
+using ModelContextProtocol.AspNetCore.Auth;
+
+namespace Microsoft.Extensions.DependencyInjection;
+
+/// <summary>
+/// Extension methods for adding MCP authorization policies to ASP.NET Core applications.
+/// </summary>
+public static class McpAuthorizationExtensions
+{
+    /// <summary>
+    /// Adds a preconfigured MCP policy to the authorization options.
+    /// </summary>
+    /// <param name="options">The authorization options.</param>
+    /// <param name="policyName">The name of the policy to add. Default is <see cref="McpAuthenticationDefaults.AuthenticationScheme"/>.</param>
+    /// <param name="configurePolicy">An optional action to further configure the policy builder.</param>
+    /// <returns>The authorization options for chaining.</returns>
+    public static AuthorizationOptions AddMcpPolicy(
+        this AuthorizationOptions options,
+        string policyName = McpAuthenticationDefaults.AuthenticationScheme,
+        Action<AuthorizationPolicyBuilder>? configurePolicy = null)
+    {
+        // Create a policy builder with default MCP configuration
+        var policyBuilder = new AuthorizationPolicyBuilder()
+            .RequireAuthenticatedUser()
+            .AddAuthenticationSchemes(McpAuthenticationDefaults.AuthenticationScheme);
+
+        // Allow additional configuration if provided
+        configurePolicy?.Invoke(policyBuilder);
+
+        // Add the configured policy
+        options.AddPolicy(policyName, policyBuilder.Build());
+
+        return options;
+    }
+}