From a5629e63d2284043d874a1cc005efbd2b80ea0ef Mon Sep 17 00:00:00 2001 From: Moritz <124840534+HiMoritz@users.noreply.github.com> Date: Sat, 24 Jan 2026 17:23:21 +0100 Subject: [PATCH] fix: prevent deletion of OIDC provider logo for non admin/anonymous users (#1267) --- backend/internal/controller/oidc_controller.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/internal/controller/oidc_controller.go b/backend/internal/controller/oidc_controller.go index 308bf2c8..b0b01598 100644 --- a/backend/internal/controller/oidc_controller.go +++ b/backend/internal/controller/oidc_controller.go @@ -47,7 +47,7 @@ func NewOidcController(group *gin.RouterGroup, authMiddleware *middleware.AuthMi group.POST("/oidc/clients/:id/secret", authMiddleware.Add(), oc.createClientSecretHandler) group.GET("/oidc/clients/:id/logo", oc.getClientLogoHandler) - group.DELETE("/oidc/clients/:id/logo", oc.deleteClientLogoHandler) + group.DELETE("/oidc/clients/:id/logo", authMiddleware.Add(), oc.deleteClientLogoHandler) group.POST("/oidc/clients/:id/logo", authMiddleware.Add(), fileSizeLimitMiddleware.Add(2<<20), oc.updateClientLogoHandler) group.GET("/oidc/clients/:id/preview/:userId", authMiddleware.Add(), oc.getClientPreviewHandler)