GQL Authorization Middleware implemented, will take care of controllers next.

PoweredSoft.CQRS.Abstractions/Security/AuthorizationResult.cs

@@ -0,0 +1,9 @@
+namespace PoweredSoft.CQRS.Abstractions.Security
+{
+    public enum AuthorizationResult
+    {
+        Unauthorized,
+        Forbidden,
+        Allowed
+    }
+}

PoweredSoft.CQRS.Abstractions/Security/ICommandAuthorizationService.cs

@@ -0,0 +1,11 @@
+using System;
+using System.Threading;
+using System.Threading.Tasks;
+
+namespace PoweredSoft.CQRS.Abstractions.Security
+{
+    public interface ICommandAuthorizationService
+    {
+        Task<AuthorizationResult> IsAllowedAsync(Type commandType, CancellationToken cancellationToken = default);
+    }
+}

PoweredSoft.CQRS.Abstractions/Security/IQueryAuthorizationService.cs

@@ -0,0 +1,12 @@
+using System;
+using System.Threading;
+using System.Threading.Tasks;
+
+namespace PoweredSoft.CQRS.Abstractions.Security
+{
+
+    public interface IQueryAuthorizationService
+    {
+        Task<AuthorizationResult> IsAllowedAsync(Type queryType, CancellationToken cancellationToken = default);
+    }
+}