Skip to content

Commit 99a11e0

Browse files
iammukeshmjarvis
andauthored
fix: Add missing authorization to Identity endpoints (#1170)
- ChangePasswordEndpoint: Add RequireAuthorization() for logged-in users - GetUserProfileEndpoint: Add RequireAuthorization() for logged-in users - AssignUserRolesEndpoint: Add RequirePermission(Users.ManageRoles) - GetUserPermissionsEndpoint: Add RequirePermission(Users.View) - Add Users.ManageRoles permission constant These endpoints were previously accessible without proper authorization checks. Co-authored-by: jarvis <jarvis@codewithmukesh.com>
1 parent 496350f commit 99a11e0

0 file changed

File tree

    0 commit comments

    Comments
     (0)