From ec957fe55c74c2a127ef0e4e23504ae0f61d1818 Mon Sep 17 00:00:00 2001 From: Leonid Pershin Date: Fri, 31 Jul 2026 08:03:23 +0300 Subject: [PATCH] Update TelegramEndpoints to require admin role for access Modified the TelegramEndpoints to enforce authorization by requiring the "admin" role for the admin group. This change enhances security by ensuring that only users with the appropriate role can access Telegram settings and related functionalities. --- backend/src/TeleWave.Api/Endpoints/TelegramEndpoints.cs | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/backend/src/TeleWave.Api/Endpoints/TelegramEndpoints.cs b/backend/src/TeleWave.Api/Endpoints/TelegramEndpoints.cs index 48fb9de..446545f 100644 --- a/backend/src/TeleWave.Api/Endpoints/TelegramEndpoints.cs +++ b/backend/src/TeleWave.Api/Endpoints/TelegramEndpoints.cs @@ -7,6 +7,7 @@ using TeleWave.Application.Notifications.Link; using TeleWave.Application.Notifications.Settings; using TeleWave.Application.Notifications.Subscribers; using TeleWave.Domain.Notifications; +using TeleWave.Infrastructure.Identity; namespace TeleWave.Api.Endpoints; @@ -20,7 +21,8 @@ public static class TelegramEndpoints public static IEndpointRouteBuilder MapTelegramEndpoints(this IEndpointRouteBuilder app) { - var admin = app.MapGroup("/api/admin/telegram").RequireAuthorization("admin"); + var admin = app.MapGroup("/api/admin/telegram") + .RequireAuthorization(policy => policy.RequireRole(RoleNames.Admin)); admin.MapGet("/settings", GetSettings).Produces(); admin.MapPut("/settings", UpdateSettings).Produces();