From 8b4e3f1ca1d6aa51a0b24a6936eee5069680b907 Mon Sep 17 00:00:00 2001
From: Amelia <77553571+Fesaa@users.noreply.github.com>
Date: Wed, 10 Dec 2025 12:24:47 +0100
Subject: [PATCH] Don't serve any files unless authenticated

---
 API/Controllers/FallbackController.cs       |  4 +++-
 API/Extensions/IdentityServiceExtensions.cs |  7 ++++++-
 API/Startup.cs                              | 15 +++++++++++----
 In-Out.sln.DotSettings.user                 |  1 +
 4 files changed, 21 insertions(+), 6 deletions(-)

diff --git a/API/Controllers/FallbackController.cs b/API/Controllers/FallbackController.cs
index 28584f6..9a1ce86 100644
--- a/API/Controllers/FallbackController.cs
+++ b/API/Controllers/FallbackController.cs
@@ -1,10 +1,12 @@
-using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
 using Swashbuckle.AspNetCore.Annotations;
 
 namespace API.Controllers;
 
 public class FallbackController: Controller
 {
+    [Authorize]
     [SwaggerIgnore]
     public PhysicalFileResult Index()
     {
diff --git a/API/Extensions/IdentityServiceExtensions.cs b/API/Extensions/IdentityServiceExtensions.cs
index 6f9e61a..0056913 100644
--- a/API/Extensions/IdentityServiceExtensions.cs
+++ b/API/Extensions/IdentityServiceExtensions.cs
@@ -72,6 +72,11 @@ public static IServiceCollection AddIdentityServices(this IServiceCollection ser
                         {
                             ctx.Response.StatusCode = StatusCodes.Status401Unauthorized;
                         }
+                        else
+                        {
+                            ctx.Response.Redirect($"/Auth/login?returnUrl={Uri.EscapeDataString(ctx.Request.Path)}");
+                        }
+                        
                         return Task.CompletedTask;
                     }
                 };
@@ -120,7 +125,7 @@ public static IServiceCollection AddIdentityServices(this IServiceCollection ser
                         }
 
                         return Task.CompletedTask;
-                    }
+                    },
                 };
             });
 
diff --git a/API/Startup.cs b/API/Startup.cs
index 98b403b..114c34d 100644
--- a/API/Startup.cs
+++ b/API/Startup.cs
@@ -165,16 +165,23 @@ public void Configure(IApplicationBuilder app, IServiceProvider serviceProvider,
         app.UseResponseCaching();
         app.UseAuthentication();
         app.UseAuthorization();
-        app.UseDefaultFiles();
         app.UseStaticFiles(new StaticFileOptions
         {
             HttpsCompression = HttpsCompressionMode.Compress,
             OnPrepareResponse = ctx =>
             {
-                ctx.Context.Response.Headers[HeaderNames.CacheControl] = "public,max-age=" + TimeSpan.FromHours(24);
-                ctx.Context.Response.Headers["X-Robots-Tag"] = "noindex,nofollow";
-            }
+                if (ctx.Context.User.Identity?.IsAuthenticated ?? false)
+                {
+                    ctx.Context.Response.Headers[HeaderNames.CacheControl] = "public,max-age=" + TimeSpan.FromHours(24);
+                    ctx.Context.Response.Headers["X-Robots-Tag"] = "noindex,nofollow";
+                }
+                else
+                {
+                    ctx.Context.Response.Redirect($"/Auth/login?returnUrl={Uri.EscapeDataString(ctx.Context.Request.Path)}");
+                }
+            },
         });
+        app.UseDefaultFiles();
 
 
 
diff --git a/In-Out.sln.DotSettings.user b/In-Out.sln.DotSettings.user
index a6397a4..5c7bf28 100644
--- a/In-Out.sln.DotSettings.user
+++ b/In-Out.sln.DotSettings.user
@@ -8,6 +8,7 @@
 	<s:String x:Key="/Default/CodeInspection/ExcludedFiles/FilesAndFoldersToSkip2/=7020124F_002D9FFC_002D4AC3_002D8F3D_002DAAB8E0240759_002Ff_003AIHealthCheck_002Ecs_002Fl_003A_002E_002E_003F_002E_002E_003FLibrary_003FApplication_0020Support_003FJetBrains_003FRider2025_002E1_003Fresharper_002Dhost_003FDecompilerCache_003Fdecompiler_003F6e1f1cecb1e548f29127651d9abe0f1d5600_003F15_003Fbe18ce27_003FIHealthCheck_002Ecs/@EntryIndexedValue">ForceIncluded</s:String>
 	<s:String x:Key="/Default/CodeInspection/ExcludedFiles/FilesAndFoldersToSkip2/=7020124F_002D9FFC_002D4AC3_002D8F3D_002DAAB8E0240759_002Ff_003AInt32_002Ecs_002Fl_003A_002E_002E_003F_002E_002E_003F_002Econfig_003FJetBrains_003FRider2025_002E1_003Fresharper_002Dhost_003FSourcesCache_003Ff991feeb99e3f37c7c76150b38d692ac8a65a5520bffa4728b34999806b6fb7_003FInt32_002Ecs/@EntryIndexedValue">ForceIncluded</s:String>
 	<s:String x:Key="/Default/CodeInspection/ExcludedFiles/FilesAndFoldersToSkip2/=7020124F_002D9FFC_002D4AC3_002D8F3D_002DAAB8E0240759_002Ff_003ALogEventLevel_002Ecs_002Fl_003A_002E_002E_003F_002E_002E_003F_002Econfig_003FJetBrains_003FRider2025_002E1_003Fresharper_002Dhost_003FSourcesCache_003Fff887d9badd6d7559c49d29ab4bad19259299a87e0111d96cd583add9e9a2a_003FLogEventLevel_002Ecs/@EntryIndexedValue">ForceIncluded</s:String>
+	<s:String x:Key="/Default/CodeInspection/ExcludedFiles/FilesAndFoldersToSkip2/=7020124F_002D9FFC_002D4AC3_002D8F3D_002DAAB8E0240759_002Ff_003ALoggerCallerEnrichmentConfiguration_002Ecs_002Fl_003A_002E_002E_003F_002E_002E_003F_002E_002E_003FLibrary_003FApplication_0020Support_003FJetBrains_003FRider2025_002E2_003Fresharper_002Dhost_003FDecompilerCache_003Fdecompiler_003F88d4727da4784dd188ebcbac21e09f552ac00_003Fd1_003F0cdb389c_003FLoggerCallerEnrichmentConfiguration_002Ecs/@EntryIndexedValue">ForceIncluded</s:String>
 	<s:String x:Key="/Default/CodeInspection/ExcludedFiles/FilesAndFoldersToSkip2/=7020124F_002D9FFC_002D4AC3_002D8F3D_002DAAB8E0240759_002Ff_003ALoggerConfiguration_002Ecs_002Fl_003AC_0021_003FUsers_003FAamel_003FAppData_003FRoaming_003FJetBrains_003FRider2024_002E3_003Fresharper_002Dhost_003FDecompilerCache_003Fdecompiler_003F74ca1d8fbb4e46c08b3445afb0cadf3927800_003F3b_003F662b0056_003FLoggerConfiguration_002Ecs/@EntryIndexedValue">ForceIncluded</s:String>
 	<s:String x:Key="/Default/CodeInspection/ExcludedFiles/FilesAndFoldersToSkip2/=7020124F_002D9FFC_002D4AC3_002D8F3D_002DAAB8E0240759_002Ff_003APrometheusExporterApplicationBuilderExtensions_002Ecs_002Fl_003A_002E_002E_003F_002E_002E_003FLibrary_003FApplication_0020Support_003FJetBrains_003FRider2025_002E1_003Fresharper_002Dhost_003FSourcesCache_003F40b4abe4f99b674acb3c3756e48f1ec672b359ed65b7f1bfde1589e2ff73a2_003FPrometheusExporterApplicationBuilderExtensions_002Ecs/@EntryIndexedValue">ForceIncluded</s:String>
 	<s:String x:Key="/Default/CodeInspection/ExcludedFiles/FilesAndFoldersToSkip2/=7020124F_002D9FFC_002D4AC3_002D8F3D_002DAAB8E0240759_002Ff_003APrometheusExporterEndpointRouteBuilderExtensions_002Ecs_002Fl_003A_002E_002E_003F_002E_002E_003FLibrary_003FApplication_0020Support_003FJetBrains_003FRider2025_002E1_003Fresharper_002Dhost_003FSourcesCache_003F13936231af69c214273ff1a26928ac94e2e6febce688398cad1fb7a56cfb48e_003FPrometheusExporterEndpointRouteBuilderExtensions_002Ecs/@EntryIndexedValue">ForceIncluded</s:String>