secure-core/SecureCore/Controllers/EmployeeController.cs

using Microsoft.AspNetCore.Http;
using Microsoft.AspNetCore.Mvc;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using SecureCore.Services;
using SecureCore.Authentication;

namespace SecureCore.Controllers
{
    [Route("api/[controller]")]
    [ApiController]
    public class EmployeeController : Controller
    {
        private readonly IDataService DataService;


        public EmployeeController(IDataService dataService)
        {
            DataService = dataService;
        }

        [HttpGet]
        public IActionResult Get()
        {
            if(SessionManager.IsSessionTokenValid(HttpContext))
                return Ok(DataService.Get());
            else
               return Unauthorized();
        }

        [HttpGet("{id}", Name = "Get")]
        public IActionResult Get(int id)
        {
            if (SessionManager.IsSessionTokenValid(HttpContext))
                return Ok(DataService.GetById(id));
            else
                return Unauthorized();
        }
    }

    public class AuthenticatedUser
    {
        public string UserName { get; set; }
        public string SessionToken { get; set; }
    }
}