Fixed access issues around new Authorize scheme. (#1417)

API/Controllers/BookController.cs

@@ -8,6 +8,8 @@ using API.DTOs.Reader;
 using API.Entities.Enums;
 using API.Services;
 using Kavita.Common;
+using HtmlAgilityPack;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using VersOne.Epub;
 
@@ -91,6 +93,7 @@ namespace API.Controllers
         /// <returns></returns>
         [HttpGet("{chapterId}/book-resources")]
         [ResponseCache(Duration = 60 * 1, Location = ResponseCacheLocation.Client, NoStore = false)]
+        [AllowAnonymous]
         public async Task<ActionResult> GetBookPageResources(int chapterId, [FromQuery] string file)
         {
             if (chapterId <= 0) return BadRequest("Chapter is not valid");

API/Controllers/ImageController.cs

@@ -11,6 +11,7 @@ namespace API.Controllers
     /// <summary>
     /// Responsible for servicing up images stored in Kavita for entities
     /// </summary>
+    [AllowAnonymous]
     public class ImageController : BaseApiController
     {
         private readonly IUnitOfWork _unitOfWork;

API/Controllers/ReaderController.cs

@@ -13,6 +13,7 @@ using API.Extensions;
 using API.Services;
 using API.SignalR;
 using Hangfire;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.Extensions.Logging;
 
@@ -80,6 +81,7 @@ namespace API.Controllers
         /// <returns></returns>
         [HttpGet("image")]
         [ResponseCache(Duration = 60 * 10, Location = ResponseCacheLocation.Client, NoStore = false)]
+        [AllowAnonymous]
         public async Task<ActionResult> GetImage(int chapterId, int page)
         {
             if (page < 0) page = 0;

UI/Web/src/app/pdf-reader/pdf-reader/pdf-reader.component.html

@@ -1,4 +1,4 @@
-<div class="{{theme}}">
+<div class="{{theme}}" *ngIf="accountService.currentUser$ | async as user">
 
     <ng-container *ngIf="isLoading">
         <div class="loading mx-auto" style="min-width: 200px; width: 600px;">
@@ -14,9 +14,10 @@
     <ngx-extended-pdf-viewer
         #pdfViewer
         [src]="readerService.downloadPdf(this.chapterId)"
+        [authorization]="'Bearer ' + user.token"
         height="100vh"
         [(page)]="currentPage"
-        [textLayer]="true" 
+        [textLayer]="true"
         [useBrowserLocale]="false"
         [showHandToolButton]="true"
         [showOpenFileButton]="false"
@@ -27,7 +28,7 @@
         [showPropertiesButton]="false"
         [(zoom)]="zoomSetting"
         [showSecondaryToolbarButton]="true"
-        
+
         [showBorders]="true"
         [theme]="theme"
         [formTheme]="theme"
@@ -38,8 +39,8 @@
         (pdfLoadingStarts)="updateLoading(true)"
         (pdfLoaded)="updateLoading(false)"
         (progress)="updateLoadProgress($event)"
-    > 
-    
+    >
+
     </ngx-extended-pdf-viewer>
 
     <ng-template #multiToolbar>
@@ -78,12 +79,12 @@
                     <i class="toolbar-icon fa-solid {{this.theme === 'light' ? 'fa-sun' : 'fa-moon'}}" [ngStyle]="{color: fontColor}" aria-hidden="true"></i>
                     <span class="visually-hidden">{{this.theme === 'light' ? 'Light Theme' : 'Dark Theme'}}</span>
                 </button>
-    
+
                 <button class="btn btn-icon col-2 col-xs-1 toolbarButton" (click)="closeReader()">
                     <i class="toolbar-icon fa fa-times-circle" aria-hidden="true" [ngStyle]="{color: fontColor}"></i>
                     <span class="visually-hidden">Close Reader</span>
                 </button>
-    
+
                 <div class="verticalToolbarSeparator hiddenSmallView"></div>
                 <pdf-toggle-secondary-toolbar></pdf-toggle-secondary-toolbar>
             </div>

UI/Web/src/app/pdf-reader/pdf-reader/pdf-reader.component.ts

@@ -77,7 +77,7 @@ export class PdfReaderComponent implements OnInit, OnDestroy {
 
   private readonly onDestroy = new Subject<void>();
 
-  constructor(private route: ActivatedRoute, private router: Router, private accountService: AccountService,
+  constructor(private route: ActivatedRoute, private router: Router, public accountService: AccountService,
     private seriesService: SeriesService, public readerService: ReaderService,
     private navService: NavService, private toastr: ToastrService,
     private bookService: BookService, private themeService: ThemeService,