The `[Authorize]` attribute on the `Logout` method in the `AuthController` class was updated to use the `AuthenticationSchemes = AuthScheme.Sender` instead of the `Policy = AuthPolicy.SenderOrReceiver`. This change narrows the authorization requirement, ensuring only users under the `Sender` authentication scheme can access the `Logout` functionality.
4.9 KiB
4.9 KiB