aljaz/btcpayserver
1
0
Fork 0
mirror of https://github.com/aljazceru/btcpayserver.git synced 2025-12-18 22:44:29 +01:00
Code Issues Packages Projects Releases Wiki Activity

Require loggedin user for docs? (#1567)

Browse Source 
* Require loggedin user for docs?

We had talked before that docs should be for authorized users only. We had it in when we had Nswag but must have lost it after we switch to manual swagger files

* fix
This commit is contained in:
Andrew Camilleri
2020-05-23 21:18:51 +02:00
committed by GitHub
parent 79b034b505
commit cdf6886c39
2 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
BTCPayServer.Tests/UnitTest1.cs
View File

@@ -102,9 +102,13 @@ namespace BTCPayServer.Tests
using (var tester = ServerTester.Create()) using (var tester = ServerTester.Create())
{ {
await tester.StartAsync(); await tester.StartAsync();
var sresp = await tester.PayTester.HttpClient.GetAsync("swagger/v1/swagger.json"); var acc = tester.NewAccount();
JObject swagger = JObject.Parse(await sresp.Content.ReadAsStringAsync()); var sresp = Assert
.IsType<JsonResult>(await tester.PayTester.GetController<HomeController>(acc.UserId, acc.StoreId)
.Swagger()).Value.ToJson();
JObject swagger = JObject.Parse(sresp);
using HttpClient client = new HttpClient(); using HttpClient client = new HttpClient();
var resp = await client.GetAsync( var resp = await client.GetAsync(
"https://raw.githubusercontent.com/OAI/OpenAPI-Specification/master/schemas/v3.0/schema.json"); "https://raw.githubusercontent.com/OAI/OpenAPI-Specification/master/schemas/v3.0/schema.json");

2
BTCPayServer/Controllers/HomeController.cs
View File

@@ -114,6 +114,7 @@ namespace BTCPayServer.Controllers
} }
[Route("swagger/v1/swagger.json")] [Route("swagger/v1/swagger.json")]
[Authorize(AuthenticationSchemes = AuthenticationSchemes.Cookie+","+ AuthenticationSchemes.Greenfield)]
public async Task<IActionResult> Swagger() public async Task<IActionResult> Swagger()
{ {
JObject json = new JObject(); JObject json = new JObject();
@@ -131,6 +132,7 @@ namespace BTCPayServer.Controllers
} }
[Route("docs")] [Route("docs")]
[Authorize(AuthenticationSchemes = AuthenticationSchemes.Cookie)]
public IActionResult SwaggerDocs() public IActionResult SwaggerDocs()
{ {
return View(); return View();