security(web): secure Hangfire Dashboard with cookie authentication filter

2026-07-12 13:14:20 +09:00
parent bcc9b76212
commit a3fe301308
1 changed files with 2 additions and 3 deletions
@@ -328,8 +328,7 @@ public class HangfireAuthorizationFilter : IDashboardAuthorizationFilter
 {
    public bool Authorize(DashboardContext context)
    {
-        // TODO: Implement proper authorization check
-        // For now, allow all in development
-        return true;
+        var httpContext = context.GetHttpContext();
+        return httpContext.User.Identity?.IsAuthenticated == true;
    }
 }