Skip to content

security: require authentication on logout endpoint#18

Closed
AtlasLabs797 wants to merge 1 commit into
V-01.08from
codex/analyze-app-security-and-fix-issues-falpdf
Closed

security: require authentication on logout endpoint#18
AtlasLabs797 wants to merge 1 commit into
V-01.08from
codex/analyze-app-security-and-fix-issues-falpdf

Conversation

@AtlasLabs797
Copy link
Copy Markdown
Owner

Motivation

  • Harden session management by removing anonymous access to the POST /api/auth/logout endpoint to reduce unnecessary attack surface and audit noise, and associate the change to version V-01.07.

Description

  • Replaced [AllowAnonymous] with [Authorize] on Logout in Atlas Balance/backend/src/AtlasBalance.API/Controllers/AuthController.cs and recorded the finding and mitigation in Documentacion/LOG_ERRORES_INCIDENCIAS.md and Documentacion/DOCUMENTACION_CAMBIOS.md.

Testing

  • Attempted to run the targeted automated test dotnet test ... --filter FullyQualifiedName~AuthControllerTests, but the command failed in this environment because dotnet is not installed (dotnet: No such file or directory), so no tests were executed here; please run the backend test suite and full CI (including Docker/Testcontainers E2E) in CI/DEV to validate the change.

Codex Task

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant