Updated attributes

Author: Shama-K

4-WebApp-your-API/4-3-AnyOrg/ToDoListClient/Controllers/ToDoListController.cs

@@ -15,6 +15,7 @@
 
 namespace ToDoListClient.Controllers
 {
+    [Authorize]
     public class ToDoListController : Controller
     {
         private IToDoListService _todoListService;
@@ -24,7 +25,6 @@ public ToDoListController(IToDoListService todoListService)
             _todoListService = todoListService;
         }
         // GET: TodoList
-        [AuthorizeForScopes(ScopeKeySection = "TodoList:TodoListScope")]
         public async Task<ActionResult> Index()
         {
 

4-WebApp-your-API/4-3-AnyOrg/ToDoListClient/Startup.cs

@@ -33,9 +33,9 @@ public void ConfigureServices(IServiceCollection services)
                 // Handling SameSite cookie according to https://docs.microsoft.com/en-us/aspnet/core/security/samesite?view=aspnetcore-3.1
                 options.HandleSameSiteCookieCompatibility();
             });
-            services.AddSignIn(Configuration).
-                AddWebAppCallsProtectedWebApi(Configuration, new string[] { Configuration["TodoList:TodoListScope"] }).
-               AddInMemoryTokenCaches();
+            services.AddSignIn(Configuration)
+                .AddWebAppCallsProtectedWebApi(Configuration, new string[] { Configuration["TodoList:TodoListScope"] })
+               .AddInMemoryTokenCaches();
             services.AddTodoListService(Configuration);
             services.AddControllersWithViews(options =>
             {

4-WebApp-your-API/4-3-AnyOrg/TodoListService/Controllers/TodoListController.cs

@@ -65,7 +65,7 @@ public async Task<ActionResult<TodoItem>> GetTodoItem(int id)
 
             return todoItem;
         }
-        [HttpGet("/api/todolist/getallusers")]
+        [HttpGet("getallusers")]
         public async Task<ActionResult<IEnumerable<string>>> GetAllTodoItem()
         {
             HttpContext.VerifyUserHasAnyAcceptedScope(scopeRequiredByApi);
@@ -169,7 +169,7 @@ public async Task<List<string>> CallGraphApiOnBehalfOfUser()
             catch (MsalUiRequiredException ex)
             {
                 _tokenAcquisition.ReplyForbiddenWithWwwAuthenticateHeader(scopes, ex);
-                return null;
+                throw (ex);
             }
         }
         private static async Task<IEnumerable<User>> CallGraphApiOnBehalfOfUser(string accessToken)

4-WebApp-your-API/4-3-AnyOrg/TodoListService/Startup.cs

@@ -27,8 +27,8 @@ public void ConfigureServices(IServiceCollection services)
         {
             // Setting configuration for protected web api
 
-            services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme).
-                AddProtectedWebApi(Configuration);
+            services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
+                .AddProtectedWebApi(Configuration);
 
             // Comment above lines of code and uncomment this section if you would like to validate ID tokens for allowed tenantIds
             //services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)