From 5ddf7a1be72f5a6eca9efd5cdf3eebadcdac2bf3 Mon Sep 17 00:00:00 2001 From: Kenn Jacobsen Date: Mon, 15 Apr 2024 17:27:37 +0200 Subject: [PATCH] Clean up FIXMEs in security controllers (#16038) --- .../Controllers/Security/ConfigurationSecurityController.cs | 4 +++- .../Controllers/Security/ResetPasswordController.cs | 1 - 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/src/Umbraco.Cms.Api.Management/Controllers/Security/ConfigurationSecurityController.cs b/src/Umbraco.Cms.Api.Management/Controllers/Security/ConfigurationSecurityController.cs index 5a40224453..e65ea9752c 100644 --- a/src/Umbraco.Cms.Api.Management/Controllers/Security/ConfigurationSecurityController.cs +++ b/src/Umbraco.Cms.Api.Management/Controllers/Security/ConfigurationSecurityController.cs @@ -1,13 +1,15 @@ using Asp.Versioning; +using Microsoft.AspNetCore.Authorization; using Microsoft.AspNetCore.Http; using Microsoft.AspNetCore.Mvc; using Umbraco.Cms.Api.Management.Factories; using Umbraco.Cms.Api.Management.ViewModels.Security; +using Umbraco.Cms.Web.Common.Authorization; namespace Umbraco.Cms.Api.Management.Controllers.Security; [ApiVersion("1.0")] -// FIXME: Add requiring password reset token policy when its implemented +[Authorize(Policy = AuthorizationPolicies.DenyLocalLoginIfConfigured)] public class ConfigurationSecurityController : SecurityControllerBase { private readonly IPasswordConfigurationPresentationFactory _passwordConfigurationPresentationFactory; diff --git a/src/Umbraco.Cms.Api.Management/Controllers/Security/ResetPasswordController.cs b/src/Umbraco.Cms.Api.Management/Controllers/Security/ResetPasswordController.cs index 40a6c6a673..fb70ad89f6 100644 --- a/src/Umbraco.Cms.Api.Management/Controllers/Security/ResetPasswordController.cs +++ b/src/Umbraco.Cms.Api.Management/Controllers/Security/ResetPasswordController.cs @@ -12,7 +12,6 @@ using Umbraco.Cms.Web.Common.Authorization; namespace Umbraco.Cms.Api.Management.Controllers.Security; [ApiVersion("1.0")] -// FIXME: Add requiring password reset token policy when its implemented [Authorize(Policy = AuthorizationPolicies.DenyLocalLoginIfConfigured)] public class ResetPasswordController : SecurityControllerBase {