Moved .RequireAuthentication() to endpoints, removed it from EndpointGroup

2026-09-15 08:37:08 +02:00
parent b239c402fa
commit 364fe65e0d
77 changed files with 86 additions and 6 deletions
@@ -34,9 +34,9 @@ public class CreateEvidenceEndpoint : IEndpoint
                var r => Results.InternalServerError(r.Errors.ToProblems())
            };
        })
-        .RequireAuthorization()
-        .DisableAntiforgery()
        .WithDescription("Upload supporting evidence file to S3 and register metadata (M14)")
+        .DisableAntiforgery()
+        .RequireAuthorization(Constants.MainScope)
        .WithName(typeof(CreateEvidenceEndpoint).ToEndpointName())
        .MapToApiVersion(new ApiVersion(1))
        .Produces(StatusCodes.Status200OK)
@@ -24,6 +24,7 @@ public class CreateIndicatorEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Define indicators and baselines/targets (M08)")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(CreateIndicatorEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces(StatusCodes.Status200OK)
@@ -24,6 +24,7 @@ public class CreateMilestoneEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Define contractual milestones (M07)")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(CreateMilestoneRequest).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces(StatusCodes.Status200OK)
@@ -23,6 +23,7 @@ public sealed class GetEvidenceEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Get a specific evidence record and assiciated file URLs")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(GetEvidenceEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces<Domain.Models.Evidence>(StatusCodes.Status200OK)
@@ -21,6 +21,7 @@ public class GetEvidenceFilesEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Get a list of all uploaded evidence files metadata")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(GetEvidenceFilesEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces<Domain.Models.Evidence[]>(StatusCodes.Status200OK)
@@ -23,6 +23,7 @@ public sealed class GetEvidenceUrlEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Gets a secure download URL of the evidence file, URL expires (default: 15min)")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(GetEvidenceUrlEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces<string>(StatusCodes.Status200OK)
@@ -24,6 +24,7 @@ public sealed class GetIndicatorEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Get a specific indicator.")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(GetIndicatorEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces<Indicator>(StatusCodes.Status200OK)
@@ -22,6 +22,7 @@ public class GetIndicatorsEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems()),
                })
            .WithDescription("Get a list of indicators")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(GetIndicatorsEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces<Indicator[]>(StatusCodes.Status200OK)
@@ -22,6 +22,7 @@ public class GetMilestoneEvidenceEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Get a list of all uploaded evidence metadata for a specific mliestone")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(GetMilestoneEvidenceEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces<Domain.Models.Evidence[]>(StatusCodes.Status200OK)        
@@ -22,6 +22,7 @@ public class GetProjectEvidenceEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems()),
                })
            .WithDescription("Get a list of all uploaded evidence metadata for a specific project")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(GetProjectEvidenceEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces<Domain.Models.Evidence[]>(StatusCodes.Status200OK)        
@@ -23,6 +23,7 @@ public class RecordIndicatorAmountEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Record actual values for indicators (M08)")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(RecordIndicatorAmountEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces(StatusCodes.Status200OK)
@@ -24,6 +24,8 @@ public sealed class UpdateEvidenceEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Updates a specific evidence record metadata")
+            .RequireAuthorization(Constants.MainScope)
+            .DisableAntiforgery()
            .WithName(typeof(UpdateEvidenceEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces(StatusCodes.Status200OK)