we'll test this case
The bot automatically closes it, if there's no activity from the ticket owner. @kirotech, I reopened the ticket. and please send an email to info@abp.io if you have such issues. Many people are subscribed to this topic and reading your -personal- problem.
I reopened the question.
hi,
ABP Suite overwrites the code that it generates. For backend code, you can create partial classes to have your custom code in separate classes.
did you set this cookie value manually?
We already planned to create deployment guides.
there's no other report in terms of security test. mostly the issues that occur in the final code that you write. So, you need to make a pentest on your final app.
and I created an article request https://github.com/abpframework/abp/issues/15897 based on your comments.
you can also open a new article request at https://github.com/abpframework/abp/issues/new?assignees=&labels=community-article-request&template=03_article_request.yml
can you give concrete examples on this?
Example of what would have been useful to me:
Step by step instructions for a deployment to Azure. Including the correct setup of OpenIddict etc. Just in a way that you can run the WebApp (in my case with Blazor) securely afterwards. Also what is necessary to store the appsettings / connection strings securely (e.g. with environment variables).My application is still in the test environment, but I have not yet managed to configure OpenIddict so that it works correctly. For example, I had to set "WEBSITE_LOAD_USER_PROFILE" to true to work around the problem, etc.
Since I don't have that much experience with OpenIddict and Azure yet, I have to gather all the necessary info in the forum.
yeah you're right, Openiddict and Azure configurations can be pain. But these are not direclty related with ABP. We are framework maintainers and this is more like DevOps topic. Anyway we started to write deployment documents. Check out https://docs.abp.io/en/abp/latest/Deployment/Index
I see that most of the comments are abstract. To fine-tune our documentation and get started steps, we need concrete examples. Because for me it's very straightforward to kick-start a project. Imagine that you start a new scratch ASP.NET Core project with Docker, DevExpress, and Identity Server with a tiered architecture, would it be slaphappy?
