Altinn / app-localtest

Solution for testing apps locally on your own machine
8 stars 14 forks source link

Align the authorization policy of PartiesController for Register with the register component authorization policy #51

Closed chrrust closed 1 year ago

chrrust commented 1 year ago

Description

I have removed the Authorize attribute on PartiesController for Register to allow services without a User context to call its actions. In the actual Register component, the "PlatformAccess" policy is applied(link), indicating that only services should be authorized to call it. Because no PlatformAccessToken is present when testing an app locally, calls to this controller will be unauthorized with 401 status code. Hence why I have removed the attribute.

Verification

Documentation