Global AD windows auth middleware for Asp .Net core

WindowsAuthorizationMiddleware.cs

using System.Collections.Generic;
using System.Linq;
using System.Security.Principal;
using System.Threading.Tasks;
using Microsoft.AspNetCore.Authentication;
using Microsoft.AspNetCore.Http;

namespace Microsoft.AspNetCore.Builder
{
    public static class WindowsAuthorizationAppBuilderExtensions
    {
        public static IApplicationBuilder UseWindowsAuthorization(this IApplicationBuilder builder, IEnumerable<string> authorizedAccounts)
        {
            return builder.UseMiddleware<WindowsAuthorizationMiddleware>(authorizedAccounts);
        }
    }

    internal class WindowsAuthorizationMiddleware
    {
        private readonly RequestDelegate _next;
        private readonly IEnumerable<string> _authorizedAccounts;

        public WindowsAuthorizationMiddleware(RequestDelegate next, IEnumerable<string> authorizedAccounts)
        {
            _next = next;
            _authorizedAccounts = authorizedAccounts;
        }

        public async Task InvokeAsync(HttpContext context)
        {
            var identity = context.User?.Identity;
            if (identity == null || !identity.IsAuthenticated)
            {
                await context.ChallengeAsync();
                return;
            }
            var isAuthorized = identity is WindowsIdentity && _authorizedAccounts.Any(context.User.IsInRole);
            if (!isAuthorized)
            {
                context.Response.StatusCode = 403; // HttpStatusCode.Forbidden;
                return;
            }
            await _next.Invoke(context);
        }
    }
}