From 740d932e466e84e59fbbbfb481cf10485673cdac Mon Sep 17 00:00:00 2001 From: Daniel Brandenburg <59375397+daniel-brandenburg@users.noreply.github.com> Date: Wed, 2 Apr 2025 15:56:56 +0200 Subject: [PATCH 1/2] Update authentication.md Add clarity to sentence --- website/src/docs/hotchocolate/v15/security/authentication.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/website/src/docs/hotchocolate/v15/security/authentication.md b/website/src/docs/hotchocolate/v15/security/authentication.md index a922db13080..ab4774833ab 100644 --- a/website/src/docs/hotchocolate/v15/security/authentication.md +++ b/website/src/docs/hotchocolate/v15/security/authentication.md @@ -71,7 +71,7 @@ builder.Services .AddQueryType(); ``` -All of this does not yet lock out unauthenticated users. It only exposes the identity of the authenticated user to our application through a `ClaimsPrincipal`. If we want to prevent certain users from querying our graph, we need to utilize authorization. +All this does is lock out unauthenticated users. It only exposes the identity of the authenticated user to our application through a `ClaimsPrincipal`. If we want to prevent certain users from querying our graph, we need to utilize authorization. [Learn more about authorization](/docs/hotchocolate/v15/security/authorization) From d1939d18d8366c7b27c203b12acf2ce05338e55e Mon Sep 17 00:00:00 2001 From: Daniel Brandenburg <59375397+daniel-brandenburg@users.noreply.github.com> Date: Wed, 2 Apr 2025 17:42:47 +0200 Subject: [PATCH 2/2] Update authentication.md --- website/src/docs/hotchocolate/v15/security/authentication.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/website/src/docs/hotchocolate/v15/security/authentication.md b/website/src/docs/hotchocolate/v15/security/authentication.md index ab4774833ab..271abaae534 100644 --- a/website/src/docs/hotchocolate/v15/security/authentication.md +++ b/website/src/docs/hotchocolate/v15/security/authentication.md @@ -71,7 +71,7 @@ builder.Services .AddQueryType(); ``` -All this does is lock out unauthenticated users. It only exposes the identity of the authenticated user to our application through a `ClaimsPrincipal`. If we want to prevent certain users from querying our graph, we need to utilize authorization. +Adding authorization does not lock out unauthenticated users. It only exposes the identity of the authenticated user to our application through a `ClaimsPrincipal`. If we want to prevent certain users from querying our graph, we need to utilize authorization. [Learn more about authorization](/docs/hotchocolate/v15/security/authorization)