Security update in solutions service

.gitignore

@@ -362,3 +362,4 @@ StyleCop.Cache
 swagger-codegen
 hwproj.front/static_dist/
 hwproj.front/dist/
+.DS_Store

HwProj.APIGateway/HwProj.APIGateway.API/Controllers/SolutionsController.cs

@@ -38,10 +38,16 @@ public SolutionsController(ISolutionsServiceClient solutionsClient, IAuthService
     }
 
     [HttpGet("{solutionId}")]
+    [Authorize]
     [ProducesResponseType(typeof(Solution), (int)HttpStatusCode.OK)]
     public async Task<IActionResult> GetSolutionById(long solutionId)
     {
         var result = await _solutionsClient.GetSolutionById(solutionId);
+        if (result.StudentId != UserId && !User.IsInRole(Roles.LecturerRole))
+        {
+            return Forbid();
+        }
+
         return result == null
             ? NotFound()
             : Ok(result);
@@ -429,6 +435,7 @@ public async Task<IActionResult> RateSolution(long solutionId,
     }
 
     [HttpGet("actuality/{solutionId}")]
+    [Authorize]
     [ProducesResponseType(typeof(SolutionActualityDto), (int)HttpStatusCode.OK)]
     public async Task<IActionResult> GetSolutionActuality(long solutionId)
     {

HwProj.APIGateway/HwProj.APIGateway.API/Controllers/StatisticsController.cs

@@ -53,6 +53,7 @@ public async Task<IActionResult> GetLecturersStatistics(long courseId)
     }
 
     [HttpGet("{courseId}")]
+    [Authorize]
     [ProducesResponseType(typeof(StatisticsCourseMatesModel[]), (int)HttpStatusCode.OK)]
     public async Task<IActionResult> GetCourseStatistics(long courseId)
     {
@@ -85,6 +86,7 @@ public async Task<IActionResult> GetCourseStatistics(long courseId)
     }
 
     [HttpGet("{courseId}/charts")]
+    [Authorize]
     [ProducesResponseType(typeof(AdvancedCourseStatisticsViewModel), (int)HttpStatusCode.OK)]
     public async Task<IActionResult> GetChartStatistics(long courseId)
     {

HwProj.AuthService/HwProj.AuthService.API/appsettings.json

@@ -1,7 +1,7 @@
 {
   "ConnectionStrings": {
     "DefaultConnectionForWindows": "Server=(localdb)\\mssqllocaldb;Database=AuthServiceDB;Trusted_Connection=True;TrustServerCertificate=true;",
-    "DefaultConnectionForLinux": "Server=localhost,1433;Database=AuthServiceDB;User ID=SA;Password=password_1234;"
+    "DefaultConnectionForLinux": "Server=localhost,1433;Database=AuthServiceDB;User ID=SA;Password=password_1234;TrustServerCertificate=True;"
   },
   "Logging": {
     "LogLevel": {

HwProj.Common/HwProj.Common.Net8/ConnectionString.cs

@@ -8,7 +8,8 @@ public static class ConnectionString
 {
     public static string GetConnectionString(IConfiguration configuration)
     {
-        var option = RuntimeInformation.IsOSPlatform(OSPlatform.Linux)
+        var option = RuntimeInformation.IsOSPlatform(OSPlatform.Linux) ||
+                     RuntimeInformation.IsOSPlatform(OSPlatform.OSX)
             ? "DefaultConnectionForLinux"
             : "DefaultConnectionForWindows";
         return configuration.GetConnectionString(option) ?? "";

HwProj.Common/HwProj.Utils/Configuration/ConnectionString.cs

@@ -8,7 +8,8 @@ public static class ConnectionString
     {
         public static string GetConnectionString(IConfiguration configuration)
         {
-            if (RuntimeInformation.IsOSPlatform(OSPlatform.Linux))
+            if (RuntimeInformation.IsOSPlatform(OSPlatform.Linux) ||
+                RuntimeInformation.IsOSPlatform(OSPlatform.OSX))
             {
                 return configuration.GetConnectionString("DefaultConnectionForLinux");
             }

HwProj.ContentService/HwProj.ContentService.API/appsettings.json

@@ -1,7 +1,7 @@
 {
   "ConnectionStrings": {
     "DefaultConnectionForWindows": "Server=(localdb)\\mssqllocaldb;Database=ContentServiceDB;Trusted_Connection=True;TrustServerCertificate=true;",
-    "DefaultConnectionForLinux": "Server=localhost,1433;Database=ContentServiceDB;User ID=SA;Password=password_1234;"
+    "DefaultConnectionForLinux": "Server=localhost,1433;Database=ContentServiceDB;User ID=SA;Password=password_1234;TrustServerCertificate=True;"
   },
   "Logging": {
     "LogLevel": {

HwProj.NotificationsService/HwProj.NotificationsService.API/appsettings.json

@@ -1,7 +1,7 @@
 {
   "ConnectionStrings": {
     "DefaultConnectionForWindows": "Server=(localdb)\\mssqllocaldb;Database=NotificationsServiceDB;Trusted_Connection=True;TrustServerCertificate=true;MultipleActiveResultSets=True",
-    "DefaultConnectionForLinux": "Server=localhost,1433;Database=NotificationsServiceDB;User ID=SA;Password=password_1234;"
+    "DefaultConnectionForLinux": "Server=localhost,1433;Database=NotificationsServiceDB;User ID=SA;Password=password_1234;TrustServerCertificate=True;"
   },
   "Logging": {
     "LogLevel": {

HwProj.SolutionsService/HwProj.SolutionsService.API/Controllers/SolutionsController.cs

@@ -1,28 +1,23 @@
 using System;
-using System.Collections.Generic;
 using System.Linq;
 using System.Net;
 using System.Threading.Tasks;
 using AutoMapper;
 using HwProj.CoursesService.Client;
 using HwProj.Models.CoursesService;
-using HwProj.Models.CoursesService.ViewModels;
 using HwProj.Models.SolutionsService;
 using HwProj.Models.StatisticsService;
 using HwProj.SolutionsService.API.Domains;
 using HwProj.SolutionsService.API.Models;
 using HwProj.SolutionsService.API.Repositories;
 using HwProj.SolutionsService.API.Services;
-using HwProj.Utils.Auth;
 using HwProj.Utils.Authorization;
-using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.EntityFrameworkCore;
 
 namespace HwProj.SolutionsService.API.Controllers
 {
     [Route("api/[controller]")]
-    [Authorize(AuthenticationSchemes = AuthSchemeConstants.UserIdAuthentication)]
     [ApiController]
     public class SolutionsController : Controller
     {