From 983e357a018f7f99e571375ba02f15cb426c88bf Mon Sep 17 00:00:00 2001 From: Cucumberrbob <128094686+Cucumberrbob@users.noreply.github.com> Date: Sun, 9 Mar 2025 14:50:51 +0000 Subject: [PATCH] fix: require auth to setup provider --- server/RdtClient.Web/Controllers/AuthController.cs | 9 +-------- 1 file changed, 1 insertion(+), 8 deletions(-) diff --git a/server/RdtClient.Web/Controllers/AuthController.cs b/server/RdtClient.Web/Controllers/AuthController.cs index 9a3f6ee..f97566b 100644 --- a/server/RdtClient.Web/Controllers/AuthController.cs +++ b/server/RdtClient.Web/Controllers/AuthController.cs @@ -67,7 +67,7 @@ public class AuthController(Authentication authentication, Settings settings) : return Ok(); } - [AllowAnonymous] + [Authorize(Policy = "AuthSetting")] [Route("SetupProvider")] [HttpPost] public async Task SetupProvider([FromBody] AuthControllerSetupProviderRequest? request) @@ -82,13 +82,6 @@ public class AuthController(Authentication authentication, Settings settings) : return StatusCode(401); } - var user = await authentication.GetUser(); - - if (user != null) - { - return StatusCode(401); - } - await settings.Update("Provider:Provider", request.Provider); await settings.Update("Provider:ApiKey", request.Token);