feat: Add missing middleware checks to admin app auth clients

This commit is contained in:
Faruk AYDIN
2024-02-24 01:05:04 +01:00
parent d17d8e2805
commit 5a209f81d1
3 changed files with 2 additions and 7 deletions

View File

@@ -7,10 +7,6 @@ const authorizationList = {
action: 'read', action: 'read',
subject: 'User', subject: 'User',
}, },
'/api/v1/admin/app-auth-clients/:appAuthClientId': {
action: 'read',
subject: 'App',
},
}; };
export const authorizeUser = async (request, response, next) => { export const authorizeUser = async (request, response, next) => {

View File

@@ -1,6 +1,5 @@
import { Router } from 'express'; import { Router } from 'express';
import { authenticateUser } from '../../../../helpers/authentication.js'; import { authenticateUser } from '../../../../helpers/authentication.js';
import { authorizeUser } from '../../../../helpers/authorization.js';
import getAdminAppAuthClientsAction from '../../../../controllers/api/v1/admin/app-auth-clients/get-app-auth-client.js'; import getAdminAppAuthClientsAction from '../../../../controllers/api/v1/admin/app-auth-clients/get-app-auth-client.js';
const router = Router(); const router = Router();
@@ -8,7 +7,8 @@ const router = Router();
router.get( router.get(
'/:appAuthClientId', '/:appAuthClientId',
authenticateUser, authenticateUser,
authorizeUser, authorizeAdmin,
checkIsEnterprise,
getAdminAppAuthClientsAction getAdminAppAuthClientsAction
); );

View File

@@ -23,7 +23,6 @@ router.use('/api/v1/automatisch', automatischRouter);
router.use('/api/v1/users', usersRouter); router.use('/api/v1/users', usersRouter);
router.use('/api/v1/payment', paymentRouter); router.use('/api/v1/payment', paymentRouter);
router.use('/api/v1/app-auth-clients', appAuthClientsRouter); router.use('/api/v1/app-auth-clients', appAuthClientsRouter);
router.use('/api/v1/admin/saml-auth-providers', samlAuthProvidersRouter); router.use('/api/v1/admin/saml-auth-providers', samlAuthProvidersRouter);
router.use('/api/v1/admin/roles', rolesRouter); router.use('/api/v1/admin/roles', rolesRouter);
router.use('/api/v1/admin/permissions', permissionsRouter); router.use('/api/v1/admin/permissions', permissionsRouter);