mirror of
https://github.com/azaion/admin.git
synced 2026-04-22 11:16:33 +00:00
don't send hardware hash, calc on the api
This commit is contained in:
@@ -151,9 +151,9 @@ app.MapPost("/resources/get/{dataFolder?}", //Need to have POST method for secur
|
||||
if (user == null)
|
||||
throw new UnauthorizedAccessException();
|
||||
|
||||
await userService.CheckHardware(user, request);
|
||||
var hwHash = await userService.CheckHardwareHash(user, request);
|
||||
|
||||
var key = Security.MakeEncryptionKey(user.Email, request.Password, request.Hardware.Hash);
|
||||
var key = Security.GetApiEncryptionKey(user.Email, request.Password, hwHash);
|
||||
var stream = await resourcesService.GetEncryptedResource(dataFolder, request.FileName, key, cancellationToken);
|
||||
|
||||
return Results.File(stream, "application/octet-stream", request.FileName);
|
||||
@@ -162,11 +162,7 @@ app.MapPost("/resources/get/{dataFolder?}", //Need to have POST method for secur
|
||||
|
||||
app.MapPut("/resources/reset-hardware",
|
||||
async (string email, IUserService userService, ICache cache, CancellationToken cancellationToken) =>
|
||||
{
|
||||
await userService.UpdateHardware(email, new HardwareInfo(), cancellationToken);
|
||||
var user = await userService.GetByEmail(email, cancellationToken);
|
||||
cache.Invalidate($"{nameof(User)}.{user?.Id}");
|
||||
})
|
||||
await userService.UpdateHardware(email, new HardwareInfo(), cancellationToken))
|
||||
.RequireAuthorization(apiAdminPolicy)
|
||||
.WithOpenApi(op => new OpenApiOperation(op){ Summary = "Resets hardware id in case of hardware change"});
|
||||
|
||||
|
||||
Reference in New Issue
Block a user