Replaced the generic [Authorize] attribute with a more specific [Authorize(Policy = AuthPolicy.SenderOrReceiver)] to enforce a stricter authorization policy. Added a `using` directive for `EnvelopeGenerator.Domain.Constants` to support the new policy.
32 lines
1.0 KiB
C#
32 lines
1.0 KiB
C#
using EnvelopeGenerator.API.Models.PsPdfKitAnnotation;
|
|
using EnvelopeGenerator.Domain.Constants;
|
|
using Microsoft.AspNetCore.Authorization;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
using Microsoft.Extensions.Options;
|
|
|
|
namespace EnvelopeGenerator.API.Controllers;
|
|
|
|
/// <summary>
|
|
/// Exposes configuration data required by the client applications.
|
|
/// </summary>
|
|
/// <remarks>
|
|
/// Initializes a new instance of <see cref="ConfigController"/>.
|
|
/// </remarks>
|
|
[Route("api/[controller]")]
|
|
[ApiController]
|
|
[Authorize(Policy = AuthPolicy.SenderOrReceiver)]
|
|
public class ConfigController(IOptionsMonitor<AnnotationParams> annotationParamsOptions) : ControllerBase
|
|
{
|
|
private readonly AnnotationParams _annotationParams = annotationParamsOptions.CurrentValue;
|
|
|
|
/// <summary>
|
|
/// Returns annotation configuration that was previously rendered by MVC.
|
|
/// </summary>
|
|
[HttpGet("Annotations")]
|
|
[Obsolete("PSPDF Kit will no longer be used.")]
|
|
public IActionResult GetAnnotationParams()
|
|
{
|
|
return Ok(_annotationParams.AnnotationJSObject);
|
|
}
|
|
}
|