SF-74: Server — UserPreferencesController, claim extensions, DI registration, App.razor
This commit is contained in:
@@ -271,7 +271,12 @@ try
|
||||
.AddAuthenticationSchemes(AuthScheme.Receiver)
|
||||
.RequireAuthenticatedUser()
|
||||
.RequireRole(Role.Receiver.Full, "receiver"))
|
||||
.AddPolicy(AuthPolicy.ReceiverTFA, policy => policy.RequireRole(Role.Receiver.TFA));
|
||||
.AddPolicy(AuthPolicy.ReceiverTFA, policy => policy.RequireRole(Role.Receiver.TFA))
|
||||
// Combined policy: accepts both Sender and Receiver tokens.
|
||||
// Used by endpoints accessible to both roles (e.g. UserPreferences).
|
||||
.AddPolicy(AuthPolicy.SenderOrReceiver, policy => policy
|
||||
.AddAuthenticationSchemes(AuthScheme.Sender, AuthScheme.Receiver)
|
||||
.RequireAuthenticatedUser());
|
||||
|
||||
// User Manager
|
||||
#pragma warning disable CS0618
|
||||
|
||||
Reference in New Issue
Block a user