Passing in an AuthoritizationPolicy allocates an array everytime

[davidfowl]

Security/src/Microsoft.AspNetCore.Authorization/AuthorizationServiceExtensions.cs

Line 65 in 879f0b7

return service.AuthorizeAsync(user, resource, policy.Requirements.ToArray());

It would be great if there was a way to avoid this allocation per call. AuthorizationPolicy already has an IReadOnlyList<Requirements>

Security/src/Microsoft.AspNetCore.Authorization/AuthorizationPolicy.cs

Line 52 in 879f0b7

public IReadOnlyList<IAuthorizationRequirement> Requirements { get; }

, yet we allocate a mutable array every time we need to check if a user is authorized.

/cc @HaoK

[HaoK]

8038360