diff --git a/API/Controllers/AccountController.cs b/API/Controllers/AccountController.cs index 3c9960402..1ae406b8a 100644 --- a/API/Controllers/AccountController.cs +++ b/API/Controllers/AccountController.cs @@ -13,6 +13,7 @@ using API.Interfaces.Services; using API.Services; using AutoMapper; using Kavita.Common; +using Microsoft.AspNetCore.Authorization; using Microsoft.AspNetCore.Identity; using Microsoft.AspNetCore.Mvc; using Microsoft.EntityFrameworkCore; @@ -78,6 +79,7 @@ namespace API.Controllers /// /// /// + [Authorize(Policy = "RequireAdminRole")] [HttpPost("register")] public async Task> Register(RegisterDto registerDto) { diff --git a/UI/Web/src/app/admin/admin-routing.module.ts b/UI/Web/src/app/admin/admin-routing.module.ts index a29927171..ad55b01d4 100644 --- a/UI/Web/src/app/admin/admin-routing.module.ts +++ b/UI/Web/src/app/admin/admin-routing.module.ts @@ -4,7 +4,7 @@ import { AdminGuard } from '../_guards/admin.guard'; import { DashboardComponent } from './dashboard/dashboard.component'; const routes: Routes = [ - {path: '**', component: DashboardComponent, pathMatch: 'full'}, + {path: '**', component: DashboardComponent, pathMatch: 'full', canActivate: [AdminGuard]}, { runGuardsAndResolvers: 'always', canActivate: [AdminGuard],