Moved .RequireAuthentication() to endpoints, removed it from EndpointGroup

2026-09-15 08:37:08 +02:00
parent b239c402fa
commit 364fe65e0d
77 changed files with 86 additions and 6 deletions
@@ -25,6 +25,7 @@ public class CreateAwardEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Register an approved funding award (M01)")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(CreateAwardEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces(StatusCodes.Status200OK)
@@ -25,6 +25,7 @@ public class CreateBudgetEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Create a new budget line (M05)")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(CreateBudgetEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces(StatusCodes.Status200OK)
@@ -24,6 +24,7 @@ public class CreateContractEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Create a contract record from an approved award (M02)")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(CreateContractEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces(StatusCodes.Status200OK)
@@ -23,6 +23,7 @@ public class ExecuteContractEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Execute the contract and lock the contractual version")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(ExecuteContractEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces(StatusCodes.Status200OK)
@@ -24,6 +24,7 @@ public class GetAwardEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Get award by ID")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(GetAwardEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces<Award>(StatusCodes.Status200OK)
@@ -22,6 +22,7 @@ public class GetAwardsEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Get a list of awards")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(GetAwardsEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces<Award[]>(StatusCodes.Status200OK)
@@ -24,6 +24,7 @@ public class GetBudgetEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Get budget by ID")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(GetBudgetEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces<Budget>(StatusCodes.Status200OK)
@@ -22,6 +22,7 @@ public class GetBudgetsEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Get all budgets")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(GetBudgetsEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces<Budget[]>(StatusCodes.Status200OK)
@@ -24,6 +24,7 @@ public class GetContractEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Get contract by ID")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(GetContractEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces<Contract>(StatusCodes.Status200OK)
@@ -23,6 +23,7 @@ public sealed class GetContractUrlEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Gets a secure download URL, has expiry period (default 15min)")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(GetContractUrlEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces<string>(StatusCodes.Status200OK)
@@ -22,6 +22,7 @@ public class GetContractsEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Get all contracts")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(GetContractsEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces<Contract[]>(StatusCodes.Status200OK)
@@ -25,6 +25,7 @@ public sealed class UpdateContractEndpoint : IEndpoint
                    var r => Results.InternalServerError(r.Errors.ToProblems())
                })
            .WithDescription("Updates a specific contract")
+            .RequireAuthorization(Constants.MainScope)
            .WithName(typeof(UpdateContractEndpoint).ToEndpointName())
            .MapToApiVersion(new ApiVersion(1))
            .Produces(StatusCodes.Status200OK)
@@ -33,6 +33,8 @@ public sealed class UploadContractEndpoint : IEndpoint
            };
        })
        .WithDescription("Uploads a contract file securely")
+        .RequireAuthorization(Constants.MainScope)
+        .DisableAntiforgery()
        .WithName(typeof(UploadContractEndpoint).ToEndpointName())
        .MapToApiVersion(new ApiVersion(1))
        .Produces(StatusCodes.Status200OK)