Summary
NotificationCallbackController is marked [AllowAnonymous], exposing the callback endpoint to unauthenticated callers without any compensating validation (e.g. Maskinporten token, HMAC signature, or shared secret).
This must be addressed before final release.
What needs to be done
- Implement explicit callback-origin verification (e.g. Maskinporten token validation) in the controller or as a filter/middleware.
- Reject requests that fail validation with 401/403 and log the failure.
- Add tests asserting that requests without a valid token/signature are rejected.
References
Summary
NotificationCallbackControlleris marked[AllowAnonymous], exposing the callback endpoint to unauthenticated callers without any compensating validation (e.g. Maskinporten token, HMAC signature, or shared secret).This must be addressed before final release.
What needs to be done
References