Custom auth policies with IARD overhaul

[guardrex]

Fixes #36857

Tom ...

• I think we should just keep the MVC sample as the general samp for MVC/RP. I updated the MVC samp to 10.0 and added a Blazor Web App for the main article. The new BWA samp uses a Minimal API for the demo. It's over at https://github.com/dotnet/AspNetCore.Docs.Samples/tree/main/security/authorization/AuthRequirementsDataBWA.
• The build complained about the "iard" acronym file name. I changed it to a descriptive file name.

UPDATE: I changed the "iard" file name, and it's still complaining ... "with" and the API name. We can change it if you want.

---

Internal previews

📄 File	🔗 Preview link
aspnetcore/mvc/security/authorization/custom-authorization-policies-with-iauthorizationrequirementdata-in-mvc.md	aspnetcore/mvc/security/authorization/custom-authorization-policies-with-iauthorizationrequirementdata-in-mvc
aspnetcore/security/authorization/custom-authorization-policies-with-iauthorizationrequirementdata.md	aspnetcore/security/authorization/custom-authorization-policies-with-iauthorizationrequirementdata
aspnetcore/toc.yml	aspnetcore/toc

[Copilot]

Pull request overview

Refactors the IAuthorizationRequirementData documentation to emphasize Blazor scenarios, while adding a dedicated ASP.NET Core MVC companion article and exposing it in the MVC Authorization TOC.

Changes:

• Updates security/authorization/iard.md to reference a Blazor Web App sample and adds a Minimal API-based demonstration flow.
• Adds a new MVC-specific article at mvc/security/authorization/iard.md with JWT + curl testing steps.
• Adds the new MVC article to aspnetcore/toc.yml under MVC → Security and Identity → Authorization.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 5 comments.

File	Description
aspnetcore/toc.yml	Adds the MVC IARD article under the MVC Authorization section.
aspnetcore/security/authorization/iard.md	Repositions the IARD article toward Blazor-focused guidance and updates sample references and demo.
aspnetcore/mvc/security/authorization/iard.md	Introduces an MVC-specific companion article and links back to the main IARD page.

[guardrex]

@halter73 ... Could you take a look at #33353 and let me know if changes are required to react to his comments?

The samples for the two articles are at ...

• https://github.com/dotnet/AspNetCore.Docs.Samples/tree/main/security/authorization/AuthRequirementsDataBWA
• https://github.com/dotnet/AspNetCore.Docs.Samples/tree/main/security/authorization/AuthRequirementsData

[tdykstra]

LGTM

[guardrex]

Tom ... Great idea. I made 5001 (HTTPS) the port, and I also put 5000 (HTTP) on both samples for those who would like to test without having to deal with certificate config. Sample updates were made here ...

https://github.com/dotnet/AspNetCore.Docs.Samples/pull/293/changes

We're good to go here for the primary updates. I've messaged Stephen to ask about the other open issue for this article. I can't follow the reasoning of the ask on that issue, so he'll need to figure out if that's a valid concern and exactly what changes we'd need to make.