Updated Security

-- WEB API --
-Added authorize attribute to controllers
-Deleted readme.me

-- WEB CLIENT --
-Removed default login credential in login form
-Updated footer

Author: jioo

WebApi/Controllers/AccountsController.cs

@@ -15,7 +15,7 @@
 
 namespace WebApi.Controllers
 {
-    // [Authorize(Roles = "Admin")]
+    [Authorize(Roles = "Admin")]
     [Route("api/[controller]")]
     public class AccountsController : ControllerBase
     {

WebApi/Controllers/ConfigController.cs

@@ -15,6 +15,7 @@
 
 namespace WebApi.Controllers
 {
+    [Authorize(Roles = "Admin")]
     [Route("api/[controller]")]
     [ApiController]
     public class ConfigController : ControllerBase

WebApi/Controllers/EmployeeController.cs

@@ -15,6 +15,7 @@
 
 namespace WebApi.Controllers
 {
+    [Authorize(Roles = "Admin")]
     [Route("api/[controller]")]
     [ApiController]
     public class EmployeeController : ControllerBase
@@ -43,6 +44,7 @@ public async Task<IActionResult> Find(Guid id)
             return new OkObjectResult( JsonConvert.SerializeObject(res, settings) );
         }
 
+        
         // PUT api/employee
         [HttpPut]
         public async Task<IActionResult> Update([FromBody]EmployeeViewModel model)

WebApi/Controllers/LogController.cs

@@ -15,6 +15,7 @@
 
 namespace WebApi.Controllers
 {
+    [Authorize]
     [Route("api/[controller]")]
     [ApiController]
     public class LogController : ControllerBase
@@ -37,6 +38,7 @@ public async Task<IActionResult> Index()
 
         // POST api/log
         [HttpPost]
+        [AllowAnonymous]
         public async Task<IActionResult> Log([FromBody] LogInOutViewModel model)
         {
             var user = await _service.CheckCardNo(model);
@@ -51,6 +53,7 @@ public async Task<IActionResult> Log([FromBody] LogInOutViewModel model)
 
         // PUT api/log
         [HttpPut]
+        [Authorize(Roles = "Admin")]
         public async Task<IActionResult> Update([FromBody]LogEditViewModel model)
         {
             try

WebApi/Repositories/ContextRepository.cs

@@ -19,11 +19,6 @@ public ContextRepository(DbContext context)
             _dbSet = context.Set<TEntity>();
         }
 
-        private static object GetPropValue(object src, string propName)
-        {
-            return src.GetType().GetProperty(propName).GetValue(src, null);
-        }
-
         public TEntity GetFirstOrDefault(Expression<Func<TEntity, bool>> filter = null, params Expression<Func<TEntity, object>>[] includes)
         {
             IQueryable<TEntity> query = _dbSet;

WebApi/Startup.cs

@@ -45,8 +45,8 @@ public Startup(IConfiguration configuration, IHostingEnvironment env)
         // This method gets called by the runtime. Use this method to add services to the container.
         public void ConfigureServices(IServiceCollection services)
         {
-            // string SecretKey = Configuration["AppSecret"];
-            string SecretKey = "141FE29A91D7FA1A13F3C713BB789";
+            string SecretKey = Configuration["AppSecret"];
+            // string SecretKey = "141FE29A91D7FA1A13F3C713BB789";
             SymmetricSecurityKey _signingKey = new SymmetricSecurityKey(Encoding.ASCII.GetBytes(SecretKey));
 
             // Add framework services.

WebApi/appsettings.json

@@ -13,12 +13,12 @@
     "Audience": "http://localhost:5000/"
   },
   "DefaultAdminCredentials": {
-    "UserName": "superadmin",
+    "UserName": "admin",
     "Password": "123456"
   },
   "AttendanceConfig": {
     "TimeIn": "9:00",
     "TimeOut": "18:00",
-    "GracePeriod": "15"
+    "GraceTime": "15"
   }
 }

WebClient/README.md

@@ -1,27 +1,28 @@
 <template>
     <div id="app">
         <v-app dark>
-          <app-header />
-          <v-content>
-              <!-- <transition name="fade-transition"> -->
-                  <router-view />
-              <!-- </transition> -->
-              <notifications />
-          </v-content>
-          <v-footer app>
-            <span>&copy; 2018</span>
-          </v-footer>
+            <app-header />
+            <v-content>
+                <router-view />
+                <notifications />
+            </v-content>
+            <app-footer />
+            <!-- <v-footer app>
+                <span>&copy; 2018</span>
+            </v-footer> -->
         </v-app>
     </div>
 </template>
 
 <script>
 import AppHeader from '@/views/app-header'
+import AppFooter from '@/views/app-footer'
 
 export default {
     name: 'App',
     components: {
-        AppHeader
+        AppHeader,
+        AppFooter
     }
 }
 </script>
@@ -30,7 +31,6 @@ export default {
     .vue-notification {
         padding: 10px;
         margin: 12px 5px 0 5px;
-
         font-size: 14px;
     }
 </style>

WebClient/src/App.vue

@@ -24,7 +24,6 @@
 <script>
 import { LOG_EMPLOYEE } from '@/store/actions-type'
 import { mapGetters } from 'vuex'
-// import { HubConnection } from '@aspnet/signalr'
 import * as signalR from "@aspnet/signalr";