Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Add [AllowAnonymous] on create tenant not working

See original GitHub issue

Describe the bug Its possible to create tenant without doing any authentication?

To Reproduce Steps to reproduce the behavior: Change [MustHavePermission(RootPermissions.Tenants.Create)] to [AllowAnonymous] on TenantController -> CreateAsync, still return unauthorized

Expected behavior Create tenant without perform any authentication

Issue Analytics

State:
Created 2 years ago
Comments:5 (5 by maintainers)

Top GitHub Comments

2reactions

iammukeshmcommented, Nov 5, 2021

As per the design, only the Root Admin of the application has access to create new tenants. This comes as a part of Tenant Management. I believe this will be a secure way to manage tenants in enterprise applications.

0reactions

geekz-renocommented, Nov 6, 2021

Confirm, many thanks @iammukeshm

Top Results From Across the Web

AllowAnonymous is not working with azure ad authentication

If you want to allow the anonymous request, you can implement the authentication using OWIN component instead of using the Easy Auth.

Anonymous Aware Middleware with Endpoint Routing and ...

In this post, I want to describe an approach to allow anonymous access to a health check endpoint, added using the MapHealthChecks extension ......

Blazor Server- AD B2C - Public, User and Admin sections ...

To do b2c, VERY basic roll authorization, create a custom user attribute field on your B2C tenant (ex. isAdmin) and return it on...

Secure the Application

To allow anonymous users access to the visual application's data stored in business objects, enable role-based security in the business object's Security tab...

Web API controller hosted in Azure not respecting ...

Normally that's rather simple, you would just add the [AllowAnonymous] attribute to the controller (or specific action) and voila; ...