Activities of "EngincanV"

I am editing the same template as you-- if I put hook point 11 and 12 before and after %%child-entities-create-edit-modals%% neither hook point will show up, I get blank lines instead. Same result if I put the custom-code-blocks in the <modal> or in the <ModalContent> section right above. I have tested with a few different positions. All that appears in the generated .razor files is whitespace.

^^ another trial that did not work

Hi, I'm able to reproduce your problem and will create an issue for this problem (our qa team could not reproduce it at the first time, because they first customized the template and then generated the pages). In the meantime, you can customize the template, then delete the *.razor (your razor file) and regenerate again. This will add the other placeholders to your file and they will not be overridden. Alternatively, instead of deleting the file, you can manually add the placeholder to both templates in Suite UI and in your application.

Btw, your ticket has been refunded. Thanks for reporting this problem. Regards.

Hi

Just following up on this ticket. Its quite urgent and I am getting disappointed with the lack of response. This ticket is 9 days old now and I have only received 2 responses to date.

Thank you.

Hi, since this is not fully related to ABP, we need to test with your configurations and this takes some time. Sorry for the lack of communication. I will provide you with an answer asap.

Hi, unfortunately, I can't help with the first one, because we need more information, it's hard to understand the reason.

For the second problem, you have option to disable the recaptcha completely or check your credentials. Because we are using Google's Recaptcha and not customizing it.

Please check your settings.

For the last one, when you register, yes the user's cookie becomes invalid and expect it to re-login again.

Description:

Currently, in ABP, enforcing multi-factor authentication (MFA) only includes SMS/email methods, which are not considered fully secure. There is no option to enforce the use of an authenticator app.

Problem:

• The current MFA enforcement does not include authenticator apps.
• SMS and email are vulnerable to attacks (e.g., phishing, SIM-swap).
• From a standard business security requirements perspective, an authenticator app should be available as a mandatory MFA option.

Expected Solution:

• Add an option to enforce MFA using an authenticator app (Google Authenticator, Microsoft Authenticator, etc.).
• Allow administrators (preferably at the tenant level) to enforce this setting for all users.
• During login, check if the user has already configured an authenticator app. If not, enforce its setup, similar to the existing process available in the "My Account" section.

Benefits:

• Improved login security.
• Compliance with modern security standards.
• Better control for administrators over MFA policies.

ABP already provides 2fa with an authenticator app, see https://abp.io/docs/9.0/modules/identity/two-factor-authentication#user-side

Any update on this? web version also not working.

Hi, we updated the react-native template versions and changed to TypeScript (all .js files to .tsx) for the react-native applications except for the microservice template. I will create an internal issue for this.

Regards.

With layered application template the web version throws error and unable to run.

If you are talking about React-Native application, yes there is a known issue due to expo migration. We are currently working on that and will try to fix and release a patch version asap. Thanks for your understanding.

Regards.

Hi again, we tested but could not reproduce your problem. Adding more than 10 custom hook points are working as expected:

Can you provide more information? For example, which template did you update?

Hi, can you check your container and inspect it to ensure about the password and also confirm it's same in your microservice application?

Any update on this? web version also not working.

Hi, we updated the react-native template versions and changed to TypeScript (all .js files to .tsx) for the react-native applications except for the microservice template. I will create an internal issue for this.

Regards.

Hi, Thanks for the reply! This solution only works when a user correctly signs out of the application, which is a partial answer to my question. Is there no way to do the same also when a user closes the browser window or leaves the application website?

Hi, there is not an event for that purpose on the OpenIddict side. You may consider using SignalR, and when the user disconnects, apply your logic. (however, sometimes signalr connection terminates because of numerous reasons, so you should check it accordingly)

Regards.

i mean:
Situation 1: AppService1 gets data from my Entity with eaual filter type (set in DbContext Filter for OU) for current user's Organization Unit.
Situation 2: AppService2 gets data from my Entity with contains filter type for List of user's Organization Unit and its hierarchy units.

Hi, if I understood you correctly, for the first situation you want to apply the data filter and for the second one, you don't want to apply the data-filter and only query according to input filters. The first thing came to my mind is disabling data-filter according to a bool parameter value.

Assume that you have a repository interface as below:

public interface IMyRepository : IRepository<TEntity>
{
    Task<List<TEntity>> GetAllAsync(/* other params... */, bool ignoreOUFilters = false);
}

In the repository implementation you can do something like:

public async Task<List<TEntity>> GetAllAsync(/* other params... */, bool ignoreOUFilters = false)
{
    if(ignoreOUFilters)
    {
        using(DataFilter.Disable<IHasOrganization>())
        {
            return await GetAllInternalAsync(/* other args... */, ignoreOUFilters);
        }
    }
    
    return await GetAllInternalAsync(/* other args... */, ignoreOUFilters);
}

private async Task<List<TEntity>> GetAllInternalAsync(/* other params... */, bool ignoreOUFilters = false)
{
    //your query logic
}

Then, calling the repository method, pass if you want to allow has-organization data-filter or not.

Regards.