Added authorization to cohort endpoints

Roman Eriksen · Roman Eriksen · commit afbe03350317 · 2025-09-23T08:52:22.000+02:00
diff --git a/exercise.wwwapi/Endpoints/CohortEndpoints.cs b/exercise.wwwapi/Endpoints/CohortEndpoints.cs
@@ -4,6 +4,7 @@
 using exercise.wwwapi.DTOs.Posts;
 using exercise.wwwapi.Models;
 using exercise.wwwapi.Repository;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.EntityFrameworkCore;
 using System.Linq;
@@ -23,6 +24,8 @@ public static void ConfigureCohortEndpoints(this WebApplication app)
             cohorts.MapDelete("/{cohortId}/{userId}/{courseId}", DeleteUserFromCohort).WithSummary("Delete a user from a cohort");
         }
 
+        [Authorize]
+        [ProducesResponseType(StatusCodes.Status400BadRequest)]
         [ProducesResponseType(StatusCodes.Status200OK)]
         public static async Task<IResult> GetCohort(IRepository<Cohort> service, IMapper mapper, int cohortId)
         {
@@ -52,7 +55,8 @@ public static async Task<IResult> GetCohort(IRepository<Cohort> service, IMapper
             //return TypedResults.Ok(cohortDTOs);
         }
 
-
+        [Authorize]
+        [ProducesResponseType(StatusCodes.Status400BadRequest)]
         [ProducesResponseType(StatusCodes.Status200OK)]
         public static async Task<IResult> GetCohortByUserId(IRepository<Cohort> cohortRepo, IMapper mapper, int userId) 
         {
@@ -81,6 +85,7 @@ public static async Task<IResult> GetCohortByUserId(IRepository<Cohort> cohortRe
             return TypedResults.Ok(response);
         }
 
+        [Authorize]
         [ProducesResponseType(StatusCodes.Status200OK)]
         public static async Task<IResult> GetAllCohorts(IRepository<Cohort> cohortService, IMapper mapper)
         {
@@ -102,6 +107,8 @@ public static async Task<IResult> GetAllCohorts(IRepository<Cohort> cohortServic
             return TypedResults.Ok(response);
         }
 
+        [Authorize]
+        [ProducesResponseType(StatusCodes.Status400BadRequest)]
         [ProducesResponseType(StatusCodes.Status201Created)]
         public static async Task<IResult> CreateCohort(
             IRepository<Cohort> cohortService,
@@ -155,6 +162,7 @@ public static async Task<IResult> CreateCohort(
             return TypedResults.Created($"/api/cohorts/{cohort.Id}", response);
         }
 
+        [Authorize]
         [ProducesResponseType(StatusCodes.Status200OK)]
         [ProducesResponseType(StatusCodes.Status400BadRequest)]
         public static async Task<IResult> AddUserToCohort(
@@ -243,6 +251,7 @@ public static async Task<IResult> AddUserToCohort(
             });
         }
 
+        [Authorize]
         [ProducesResponseType(StatusCodes.Status200OK)]
         [ProducesResponseType(StatusCodes.Status400BadRequest)]
         public static async Task<IResult> DeleteUserFromCohort(

Original file line number	Diff line number	Diff line change
`@@ -4,6 +4,7 @@`
`4`	`4`	`using exercise.wwwapi.DTOs.Posts;`
`5`	`5`	`using exercise.wwwapi.Models;`
`6`	`6`	`using exercise.wwwapi.Repository;`
	`7`	`+using Microsoft.AspNetCore.Authorization;`
`7`	`8`	`using Microsoft.AspNetCore.Mvc;`
`8`	`9`	`using Microsoft.EntityFrameworkCore;`
`9`	`10`	`using System.Linq;`
`@@ -23,6 +24,8 @@ public static void ConfigureCohortEndpoints(this WebApplication app)`
`23`	`24`	`cohorts.MapDelete("/{cohortId}/{userId}/{courseId}", DeleteUserFromCohort).WithSummary("Delete a user from a cohort");`
`24`	`25`	`}`
`25`	`26`
	`27`	`+ [Authorize]`
	`28`	`+ [ProducesResponseType(StatusCodes.Status400BadRequest)]`
`26`	`29`	`[ProducesResponseType(StatusCodes.Status200OK)]`
`27`	`30`	`public static async Task<IResult> GetCohort(IRepository<Cohort> service, IMapper mapper, int cohortId)`
`28`	`31`	`{`
`@@ -52,7 +55,8 @@ public static async Task<IResult> GetCohort(IRepository<Cohort> service, IMapper`
`52`	`55`	`//return TypedResults.Ok(cohortDTOs);`
`53`	`56`	`}`
`54`	`57`
`55`		`-`
	`58`	`+ [Authorize]`
	`59`	`+ [ProducesResponseType(StatusCodes.Status400BadRequest)]`
`56`	`60`	`[ProducesResponseType(StatusCodes.Status200OK)]`
`57`	`61`	`public static async Task<IResult> GetCohortByUserId(IRepository<Cohort> cohortRepo, IMapper mapper, int userId)`
`58`	`62`	`{`
`@@ -81,6 +85,7 @@ public static async Task<IResult> GetCohortByUserId(IRepository<Cohort> cohortRe`
`81`	`85`	`return TypedResults.Ok(response);`
`82`	`86`	`}`
`83`	`87`
	`88`	`+ [Authorize]`
`84`	`89`	`[ProducesResponseType(StatusCodes.Status200OK)]`
`85`	`90`	`public static async Task<IResult> GetAllCohorts(IRepository<Cohort> cohortService, IMapper mapper)`
`86`	`91`	`{`
`@@ -102,6 +107,8 @@ public static async Task<IResult> GetAllCohorts(IRepository<Cohort> cohortServic`
`102`	`107`	`return TypedResults.Ok(response);`
`103`	`108`	`}`
`104`	`109`
	`110`	`+ [Authorize]`
	`111`	`+ [ProducesResponseType(StatusCodes.Status400BadRequest)]`
`105`	`112`	`[ProducesResponseType(StatusCodes.Status201Created)]`
`106`	`113`	`public static async Task<IResult> CreateCohort(`
`107`	`114`	`IRepository<Cohort> cohortService,`
`@@ -155,6 +162,7 @@ public static async Task<IResult> CreateCohort(`
`155`	`162`	`return TypedResults.Created($"/api/cohorts/{cohort.Id}", response);`
`156`	`163`	`}`
`157`	`164`
	`165`	`+ [Authorize]`
`158`	`166`	`[ProducesResponseType(StatusCodes.Status200OK)]`
`159`	`167`	`[ProducesResponseType(StatusCodes.Status400BadRequest)]`
`160`	`168`	`public static async Task<IResult> AddUserToCohort(`
`@@ -243,6 +251,7 @@ public static async Task<IResult> AddUserToCohort(`
`243`	`251`	`});`
`244`	`252`	`}`
`245`	`253`
	`254`	`+ [Authorize]`
`246`	`255`	`[ProducesResponseType(StatusCodes.Status200OK)]`
`247`	`256`	`[ProducesResponseType(StatusCodes.Status400BadRequest)]`
`248`	`257`	`public static async Task<IResult> DeleteUserFromCohort(`