Skip to content
Snippets Groups Projects
Commit b0f0b1e2 authored by Kacper Kelner's avatar Kacper Kelner
Browse files

Added a security features so you can not longer create a Admin account.

parent 69b1b694
No related branches found
No related tags found
No related merge requests found
......@@ -6,6 +6,8 @@ using Microsoft.IdentityModel.Tokens;
using System.IdentityModel.Tokens.Jwt;
using System.Security.Claims;
using System.Text;
using System.IO.Compression;
using ZiggyCreatures.Caching.Fusion.Events;
namespace assignment1.Controllers
{
......@@ -31,12 +33,22 @@ namespace assignment1.Controllers
Email = model.Email
};
var result = await _userManager.CreateAsync(user, model.Password);
if (model.Role != "Admin"){
var result = await _userManager.CreateAsync(user, model.Password);
if (!result.Succeeded)
return BadRequest(result.Errors);
await _userManager.AddToRoleAsync(user, model.Role);
return Ok("User created!");
}
else
{
return BadRequest("You cannot register as an admin. Please contact the administrator.");
}
;
}
[HttpPost("login")]
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment