summary refs log tree commit diff
path: root/extra/admin-api/Spacebar.AdminAPI/Services/AuthenticationService.cs
diff options
context:
space:
mode:
authorRory& <root@rory.gay>2025-10-14 09:07:55 +0200
committerRory& <root@rory.gay>2025-10-14 09:07:55 +0200
commit58d92080d544e255ee3fd0c0e722a7c6f1c474a7 (patch)
treef3ba88ea3ad8f03b8a0a01fce11bea0965d4b4c6 /extra/admin-api/Spacebar.AdminAPI/Services/AuthenticationService.cs
parentSchema fixes, api bug fix (diff)
downloadserver-ts-58d92080d544e255ee3fd0c0e722a7c6f1c474a7.tar.xz
Admin api changes
Diffstat (limited to 'extra/admin-api/Spacebar.AdminAPI/Services/AuthenticationService.cs')
-rw-r--r--extra/admin-api/Spacebar.AdminAPI/Services/AuthenticationService.cs5
1 files changed, 3 insertions, 2 deletions
diff --git a/extra/admin-api/Spacebar.AdminAPI/Services/AuthenticationService.cs b/extra/admin-api/Spacebar.AdminAPI/Services/AuthenticationService.cs

index 53d2cf21..269935bf 100644 --- a/extra/admin-api/Spacebar.AdminAPI/Services/AuthenticationService.cs +++ b/extra/admin-api/Spacebar.AdminAPI/Services/AuthenticationService.cs
@@ -13,6 +13,7 @@ public class AuthenticationService(SpacebarDbContext db, Configuration config) { public async Task<User> GetCurrentUser(HttpRequest request) { if (!request.Headers.ContainsKey("Authorization")) { + Console.WriteLine(string.Join(", ", request.Headers.Keys)); throw new UnauthorizedAccessException(); } @@ -25,7 +26,7 @@ public class AuthenticationService(SpacebarDbContext db, Configuration config) { var res = await handler.ValidateTokenAsync(token, new TokenValidationParameters { IssuerSigningKey = new ECDsaSecurityKey(key), - ValidAlgorithms = new[] { "ES512" }, + ValidAlgorithms = ["ES512"], LogValidationExceptions = true, // These are required to be false for the token to be valid as they aren't provided by the token ValidateIssuer = false, @@ -33,7 +34,7 @@ public class AuthenticationService(SpacebarDbContext db, Configuration config) { ValidateAudience = false, }); - if (!res.IsValid) { + if (!res.IsValid && !config.DisableAuthentication) { throw new UnauthorizedAccessException(); }