From e12a57b83ae900be4ec59b53fda9c8dc3633d0ac Mon Sep 17 00:00:00 2001
From: Sipke Schoorstra <sipkeschoorstra@outlook.com>
Date: Tue, 2 May 2023 11:03:34 +0200
Subject: [PATCH] Fix localhost permissions for AllInOne bundle app

Fixes #3987
---
 src/bundles/Elsa.AllInOne.Web/Program.cs              | 11 ++---------
 .../Endpoints/Applications/Create/Endpoint.cs         |  2 +-
 2 files changed, 3 insertions(+), 10 deletions(-)

diff --git a/src/bundles/Elsa.AllInOne.Web/Program.cs b/src/bundles/Elsa.AllInOne.Web/Program.cs
index 3b0a1de5a..1f15e4bc8 100644
--- a/src/bundles/Elsa.AllInOne.Web/Program.cs
+++ b/src/bundles/Elsa.AllInOne.Web/Program.cs
@@ -1,12 +1,8 @@
 using Elsa.EntityFrameworkCore.Extensions;
 using Elsa.Extensions;
-using Elsa.Identity;
-using Elsa.EntityFrameworkCore.Modules.Labels;
 using Elsa.EntityFrameworkCore.Modules.Management;
 using Elsa.EntityFrameworkCore.Modules.Runtime;
-using Elsa.Requirements;
 using Elsa.Webhooks.Extensions;
-using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 
 var builder = WebApplication.CreateBuilder(args);
@@ -20,8 +16,6 @@ var identityTokenSection = identitySection.GetSection("Tokens");
 // Add Elsa services.
 services
     .AddElsa(elsa => elsa
-        .UseWorkflows()
-        .UseWorkflowsApi()
         .UseIdentity(identity =>
         {
             identity.IdentityOptions = options => identitySection.Bind(options);
@@ -38,18 +32,16 @@ services
             runtime.UseExecutionLogRecords(e => e.UseEntityFrameworkCore(ef => ef.UseSqlite(sqliteConnectionString)));
             runtime.UseAsyncWorkflowStateExporter();
         })
-        .UseLabels(labels => labels.UseEntityFrameworkCore(ef => ef.UseSqlite(sqliteConnectionString)))
         .UseScheduling()
         .UseJavaScript()
         .UseLiquid()
         .UseHttp()
         .UseEmail(email => email.ConfigureOptions = options => configuration.GetSection("Smtp").Bind(options))
         .UseWebhooks(webhooks => webhooks.WebhookOptions = options => builder.Configuration.GetSection("Webhooks").Bind(options))
+        .UseWorkflowsApi()
     );
 
 services.AddHealthChecks();
-services.AddSingleton<IAuthorizationHandler, LocalHostRequirementHandler>();
-services.AddAuthorization(options => options.AddPolicy(IdentityPolicyNames.SecurityRoot, policy => policy.AddRequirements(new LocalHostRequirement())));
 services.AddCors(cors => cors.AddDefaultPolicy(policy => policy.AllowAnyHeader().AllowAnyMethod().AllowAnyOrigin()));
 
 // Razor Pages.
@@ -67,6 +59,7 @@ if (!app.Environment.IsDevelopment())
 }
 
 app.UseHttpsRedirection();
+app.MapHealthChecks("/health");
 app.UseCors();
 app.UseStaticFiles();
 app.UseRouting();
diff --git a/src/modules/Elsa.Identity/Endpoints/Applications/Create/Endpoint.cs b/src/modules/Elsa.Identity/Endpoints/Applications/Create/Endpoint.cs
index d930bd27e..0d6cd3876 100644
--- a/src/modules/Elsa.Identity/Endpoints/Applications/Create/Endpoint.cs
+++ b/src/modules/Elsa.Identity/Endpoints/Applications/Create/Endpoint.cs
@@ -43,7 +43,7 @@ internal class Create : ElsaEndpoint<Request, Response>
     public override void Configure()
     {
         Post("/identity/applications");
-        Permissions("create:application");
+        ConfigurePermissions("create:application");
         Policies(IdentityPolicyNames.SecurityRoot);
     }