Merge pull request 'features/IdentitySvc' (#2) from features/IdentitySvc into dev

Reviewed-on: #2

src/CatalogService/Controllers/ExercicesController.cs

@@ -1,4 +1,3 @@
-using System.Security.Claims;
 using AutoMapper;
 using CatalogService.Data;
 using CatalogService.DTOs;
@@ -11,7 +10,8 @@ using Shared.DTOs;
 namespace CatalogService.Controllers;
 
 [ApiController]
-[Route("api/[controller]")]
+[Authorize]
+[Route("api/catalog/[controller]")]
 public class ExercicesController : ControllerBase
 {
     private readonly CatalogDbContext _context;
@@ -23,11 +23,12 @@ public class ExercicesController : ControllerBase
         _mapper = mapper;
     }
     
-    //[Authorize]
+    [Authorize]
     [HttpPost]
+    [AllowAnonymous]
     public async Task<IActionResult> Create([FromBody] CreateExerciceTemplateDto dto)
     {
-        //if (User.Identity.Name != "admin") return Forbid();
+        if (User.Identity.Name != "admin") return Forbid();
         
         var exercice = _mapper.Map<Exercice>(dto);
         _context.Exercices.Add(exercice);
@@ -35,11 +36,12 @@ public class ExercicesController : ControllerBase
         return CreatedAtAction(nameof(GetById), new { id = exercice.Id }, _mapper.Map<ExerciceTemplateDto>(exercice));
     }
 
-    //[Authorize]
+    [Authorize]
     [HttpPut("{id}")]
+    [AllowAnonymous]
     public async Task<IActionResult> Update(string id, [FromBody] UpdateExerciceTemplateDto dto)
     {
-        //if (User.Identity.Name != "admin") return Forbid();
+        if (User.Identity.Name != "admin") return Forbid();
         
         var exercice = await _context.Exercices.FindAsync(id);
         if (exercice == null) return NotFound();
@@ -50,11 +52,12 @@ public class ExercicesController : ControllerBase
         return NoContent();
     }
 
-    //[Authorize]
+    [Authorize]
     [HttpDelete("{id}")]
+    [AllowAnonymous]
     public async Task<IActionResult> Delete(string id)
     {
-        //if (User.Identity.Name != "admin") return Forbid();
+        if (User.Identity.Name != "admin") return Forbid();
         
         var exercice = await _context.Exercices.FindAsync(id);
         if (exercice == null) return NotFound();
@@ -64,24 +67,16 @@ public class ExercicesController : ControllerBase
         return NoContent();
     }
 
-    //[Authorize]
+    [Authorize]
     [HttpGet("{id}")]
+    [AllowAnonymous]
     public async Task<ActionResult<ExerciceTemplateDto>> GetById(string id)
     {
-        //if (User.Identity.Name != "admin") return Forbid();
+        if (User.Identity.Name != "admin") return Forbid();
         
         var exercice = await _context.Exercices.FindAsync(id);
         if (exercice == null) return NotFound();
 
         return _mapper.Map<ExerciceTemplateDto>(exercice);
     }
-    
-    [HttpGet]
-    public async Task<ActionResult<IEnumerable<ExerciceTemplateDto>>> GetAll()
-    {
-        //if (User.Identity.Name != "admin") return Forbid();
-        
-        var exercices = await _context.Exercices.ToListAsync();
-        return Ok(_mapper.Map<IEnumerable<ExerciceTemplateDto>>(exercices));
-    }
 }

src/CatalogService/DTOs/UpdateExerciceTemplateDto.cs

@@ -5,9 +5,6 @@ namespace CatalogService.DTOs;
 
 public class UpdateExerciceTemplateDto
 {
-    [Required]
-    public required string Id { get; set; }
-
     public string? Name { get; set; }
 
     public string? Description { get; set; }

src/IdentitySvc/Controllers/RegisterApiController.cs

@@ -19,6 +19,8 @@ public class RegisterApiController : ControllerBase
     [HttpPost]
     public async Task<IActionResult> Register([FromBody] RegisterApiDto dto)
     {
+        if (dto.Username != "Harry")
+            return BadRequest("Invalid registration data.");
         var user = new ApplicationUser
         {
             UserName = dto.Username,

src/IdentitySvc/keys/is-signing-key-42C2B9ECE819B5DC8EDA350D08F82076.json

@@ -1 +0,0 @@
-{"Version":1,"Id":"42C2B9ECE819B5DC8EDA350D08F82076","Created":"2025-06-14T19:42:37.374463Z","Algorithm":"RS256","IsX509Certificate":false,"Data":"CfDJ8Lx2BhvaWGBPnMv2FYgK068s8I7kYAeibjttaIYWoP0FIsGJYdkeqGNTy_ZfK_bRpiVJkdjmWnyHbpLo1mG171nyP8y7esVLGBrS5I9IHZ275wmCTXZgwTVSRIqsYjwQn8UeShIwa_XIGt9msdq9DdSi1ZPMXn-CVTp42chSEZACfO51nEq9Tu9VgbPv_vg1y8UnJuL7_NdUWJGFXiNDfXJCCG4f7N72GxCSMvpIX2EI19j0eNlK4tD0Dv880bntsHFTDotL-Bqx_Tg6ax8AWziq9zKTydXRW-kaqcewmnFBrL6EJSM3LiKO5DLh5lPr6-4T7CmjJv56s25f6eWPhsNzJq_WH2mNX2L8MGgDVPTQMAjelkgQMP4kg2s0HLu_x-QruFmteecsJrgPjwXrRl-gnrl-rPw3akmaIYlZCQM-13yDQwTdJG5gd9Kago54mQkezmi-sjcFM_fhKfftaGpKxRJnXP8pXu8ilYJNw5Iu-Jn3EW7j4FiO8vshfg7qO13xyC7POw08WjtDt8p0yV51-1wqY3J2hlSnd-O7-AVuEDMf_rrjgwynnEBJewtN7_1c9oLKcXAUW9o4LK9O8Nq7BBoy4XUJrEBiFI27uwn-iUn7jQJ6X1DwY7bh8_eNlCM3rTAYrjc-k26mRWmc4lk4oZnBpQh6bBswCXUp3tTNgI_udtEmTRZwY0M9cLH26_NkfqIfqxGvNzb2eYkeZUg19uAwFTP4S3quXIjYs1T_aACVjbUhF-IsF6FZYx8uT02YWnaFL8s_oV9hXh-bZiBRq2uSrbuB6Yz022OQ-86kMfTbq4pVcn4IkHu3onvj1z8d4bQ25zfIaFGE9eFXbdfZYaE-tRUBIQrjt8Zx6xkXp-OzxQDPX2xh4ztyqDxN_-PI3RXvPHzLCF90gJhezjp_HxglcN4bLVJ6SglWBo0o9QICAvmQeR8ePmktYIM8hM2nzkgJDaZ4NchqhwSUNQ3PGatCz0zTopsr37fN3qFVMY7pHfaUub6bVKblBKRJo1UO1oqF5KSpffWh2yLF-pxN7RrO0EM5J8bidnpl-lyl1TL9Z3liTFIhekhSJydMJLzfvYu5exGrYiKa9BTjnMOrJ3NrQ18nwxs6ixT32V-wg5ckoA269hEZHZdLEFFT1us2wc9bksp5fmWqWJgfsitcTULjdFAIk2wQUjjuZBExtach2t636HTJNiD9xRkp-Ffe2KPzNR_sHFhh8gnsH2qPSngvWmSY-xgqf3sXfMOYGruBYJIPF-fJ6AcQLjihF-BIMq3yMZMHcC1CUw9VI9bQC92otO8TireVYHUlgdKsZYEBVUy3GRp8GHYXLyNC1rBhNw3zxl1iy4X51C8vIjtrQ_c5HwnT38DLRas6IzplzG1xPpaU4tXwKxFrNZs69V28YZeAaaEwIJFAcLUqNNELrRfk-EytmqP4IOqWJyVAq9jqrIFBLeVJwtACCq9ML3FPyNb-LORcQioivtxEMaeXkqJRww8cDGtslYwp5Kuls19NadJ9PPvBnMKGPX5oKEHTgM_-J1RnTpCd4TLGWObikBTv75it0-5jkahU2GRrXywnb88hgDGe23p45ww7-ylPOLjQPqZqXhQVtAkuvSZrEUabksVW9CQ3YxtfHAe9CiRgrjybvTlthjfoCGDnmh-NifW4JkZcV5CDEAnVeJ7ek28VyJ5iLmBjcmXIzCMUeCOFmsqrJkrlWLSKso-LNrJGrtXd48wseLokL_C9csy_efIThuHhk_eL1cO-8iK-JeUabcvTziOyFCluEa_OQaW-rW5WsfX9ou0migPHnFS2Cu44GEgedeO_E1JfrcHvZaQQgqJmWIkP70xPtm6RMbt8l2S3M7CoBVvxEFoaayz1mjXpqpxuB0eCHYx96LjzfPEvsL3IVqr24jISrPg0uxSLfPtBUlyCLZXJ6-1JVGab95BVLnqN1JyLVSKke0QTzjyqYRrhIWVRXvFbmJatQw08gGNDZ9r5c4QgoRn5J9COfFzDaCmPRwRLM4EURfd44x_k0i5eNA4Ml9LjVOZP21PE-E8JiczyeYmHNhvbMwA6dzaMBerc66DTnE4aMnPOV-8rY1HEZgFUuMqmF7FzKYlA1LeRXTg2GyQmC9VPeUnMa89zt4Tut6BdDxAX1sv0qEB_v-UnpFf8pUwvdF6TgGWb0MnGC8qRu0BN_22p_PosJ5TNxb8ju5yweysImVHaNM2f94KXItxHsUgs8SjGCF9pHNsLs8NB_uD6eWa9roqbRRhX4lbnjZPP58lYnbgixTx4kH6UydoiWyxFPkH7hcqD8Lwdb3LKUXFe9M5_kOaeEQ_XesDW-zl9c41zbQtZugTGS_Q8X-E1NwaZc22IfE7OHrR9T7GwcrAzq3NiOKbY5Y07DRRhaP0pmgT3dyuJ8sCAGsEcVCikWBPhV9CwBm8bK7s448Fu84GqUkB2FYPAYrbjgNtn3lnkQCbosE2K","DataProtected":true}

src/IdentitySvc/keys/is-signing-key-77EB8A5360F8A1CEBDE8A5C6954780A5.json

@@ -0,0 +1 @@
+{"Version":1,"Id":"77EB8A5360F8A1CEBDE8A5C6954780A5","Created":"2025-05-25T15:12:00.8996178Z","Algorithm":"RS256","IsX509Certificate":false,"Data":"CfDJ8BIJalz9mTlNqljDUzwnDk0ARrMXC6Z0QHpR_RqrdI-s1X8AxnD86UJmmJrnZRBXC0-q1fGrU2GMD1bEaR0_EnEw4GU5_fX9B1EVWs5OgQNXazOxkkCj5rnCcJmu779FXuoKbCn95KHCljQFxcAClWlRL4-7ufG5YYn3ka_3He3cHZDEt8Kh2inMFZq2jWjoxi3F668ApZQty2RmEDulv512LYH0NlKXSYgGlb6GtAHzngGjiUTIjwhKtcZ8BhgMzurm-9AZ4zLOcnnrrkA4yPgyL9omiHrkrjgbttmq107N_RsIhV9xfe5g3NqckIhRvWCPbqfzvmtiKWrkgzQJSFr73I5bYH_-9Lf10k7Jd-XMrAuf2Yts8WUNxUVw9Bv_0uSOAgMdAH0gExBKw2WxXBzc71gFUly4_THC8Od5J6CoyQIGdsSJVUskpc5z4QkkUOzoO1BoLsNL8OpkjHpuGMoQDTlC4khHqD37tJPj1cHUt5uwOrJnInmzXXSLK3mTQOtuNmbDSiNO_UJ5DnPDzvhNoPJjiTeuRWGhnd13OiC8Ehk_EIfxmSkw3Xs5v54-97MAL71DD0QYurWc2lnXjqX4_7Kqpx0kmJpTibBHXuykVBa32lMKLroo6vSAkaKPeEFNoMZymIH5oABMVHApUs2jw_TheVwuJ0pvBhFwr4wfCa5x6IDmfuKYsglkA6JZMirIDHMvBuR2OcUuW22GOt6gzMLq2LoLcBHS1pfCip4Awyl4GjW8Rs-_syjlU0Pw_PR45tUTC0Zeq-_JHWSEuhPLDmcojXN9nyPu-Rx-NlMrabK4XG8xNDpMFLTm-3XpqPMHIHNYutm3gbx9oSsEVc98hrMC1GNiLvoM8UWUxAUjlgowy3O7-nfLQRZOPnA8mo6oADjK8HNKBMFuiyiRHYDs5Xb1x4n6_EC0YdV5qutFHnyu3DTsw0K9Z_l_HyryUdIZk6jjrSvLVTlyWNigjVQAgHqu4rGQDLKB1U7o9M8cz5cMLowgUvSytvbkG9D_cmVz6LgUI4K_Nw_mNtn2Zh38NAwF-8tlY4n8QM0c5nfI12Vw1bHv-CvjRDxDga3s-0wpFXhN8ZCXlLIlbIlGZQearIKkgoTy7ssL2Ki0PS7U-8daHlZpoD7EuGL8DaUK33dgS-xfGeiKXvZtTx8ryt_6uZI8kqvzP61kUgQ_PUihFY2U-n4tiSBQ3MW9uzPBWp1w6mLx2yhl_R7OiITUYtLXQieap2psIFdbfFW4MXNgWiyzw0otXdyJHiP56v7_pwBsdz8fXsxmOU9kaec86rJzBiEtfvkVNTPor3f37ctAi9FcsWVHqgcRbebsRSeNZBFas6Cd_xPxQkIEszdB7MAbIJOvBmVfijwpv3n2rplwef_aBLe7wbnmc2nPfDjW5L-QzYaAl7Jm-sDQ9GjVMvVQgrAnAhvz7gTIRbcCq5LN7yzy6dJfQPbqj_ejGImPJZuHGHhH2iad6ppvdrnIcpYVovqXO-ORiMOnNCTzzpRkDNA9cUP-KsxFc7r3pGDViGLB7hMzylcCa1-gRkAfYmcGfxu4s3ePpVk2P-0Vn0SScHItoUJkI6yaIJ6wzmgxxE3Gpx6zxqr9nn5I0pFzKaCktB7ppT0GqFxkBf88Zx1jpo6XRQHGs5rTsoAsjcaOCzqSZy5t9jI_vh8z53A29t5QkIKnROkpHywN5zQ8x2pnpHTk9aXp2geNjDFygVhNccYzVLjXSdMJmmcSG51-lGdbX9dSC6ND7EEXRBWyacOvQKYhRGKXZF8Edn1Hp40JIW3-ZeCF_kJF9VSP_-STftlPy7NGMIYvPre0L9NU2SNVBgBTwwCkaufHGyMufYgwMwJ8jZIUHErRennTW5vYDiagjDq9h6YOg0OLgHR4xwzydrZyJBMm1ICwsBcffgKfWYFsV1XuXtGDVZ8C3b0PtT6jb6D9ixSgxWEIGERuk2cJCQooyvtPSqyYIBS-OBqwQicISfroIFtUEYzaRZQib6BRI-VpvUh1_8FSdFSoje0Je3_DFrd1N-KBVfzOy7hdfZoNpipKeq8Xrmcy7B5yQB3jG0qiKHPvk-VstzGZvf1rzqIxHmaWvNXbCmh8oRLJji3Y3LQEnxOr1lgas5jJzjplDLX7cDo08KgIX4R0yKHp34Xa_J7L8iuGcuoCIUyarxPus-ixmIA1non0Hm-6EOmYpT7h_zKmfE7H4V3i2ys4q0sOdB2y3sOUjzhHGXS8APmwnWzZX0BgStm6MrwTY3TNSC5SGegxdcLxKYpc695_5G6zxA2QRYP9_aU8ZyuRryupaB0gZUXCo9Qmzw3y2RJneteMd1SwX7X-q0W1yoV0w-C19Rd1NWuGUapKSjRYkoF4X_AJb5fAQ6XbBwgxcnlSTdJCshdphnH59mJCCR-DFaSHHpt2c7Fc9NdCN7BqzsnDCeOlnVjiVvFVbtd4mBhSk8715ul8lOpikgt9bzZi","DataProtected":true}