Settings and themes API updates

Author: rxtur

src/Core/Api/SettingsController.cs

@@ -49,7 +49,7 @@ public async Task<ActionResult<List<SelectListItem>>> GetCultures()
         }
 
         /// <summary>
-        /// Get blog settings
+        /// Get blog settings (admins only)
         /// </summary>
         /// <returns>Blog settings</returns>
         [HttpGet]
@@ -68,7 +68,7 @@ public async Task<ActionResult<BlogItem>> Get()
         }
 
         /// <summary>
-        /// Save blog settings
+        /// Save blog settings (admins only)
         /// </summary>
         /// <param name="model">Blog settings item</param>
         /// <returns>Saved blog item</returns>

src/Core/Api/ThemesController.cs

@@ -1,6 +1,7 @@
 using Core.Data;
 using Core.Helpers;
 using Core.Services;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Http;
 using Microsoft.AspNetCore.Mvc;
 using System;
@@ -27,10 +28,11 @@ public ThemesController(IDataService data, IStorageService store)
         }
 
         /// <summary>
-        /// Get list of themes
+        /// Get list of themes (authentication required)
         /// </summary>
         /// <param name="page">Page number</param>
         /// <returns>List of themes</returns>
+        [Authorize]
         [HttpGet]
         public async Task<ActionResult<IEnumerable<ThemeItem>>> Get(int page = 1)
         {
@@ -48,7 +50,7 @@ public async Task<ActionResult<IEnumerable<ThemeItem>>> Get(int page = 1)
         }
 
         /// <summary>
-        /// Set theme as current for a blog
+        /// Set theme as current for a blog (admins only)
         /// </summary>
         /// <param name="id">Theme ID</param>
         /// <returns>Success or failure</returns>
@@ -79,7 +81,7 @@ public ActionResult Put(string id)
         }
 
         /// <summary>
-        /// Remove and unistall theme from the blog
+        /// Remove and unistall theme from the blog (admins only)
         /// </summary>
         /// <param name="id">Theme ID</param>
         /// <returns>Success or failure</returns>