Activities of "balessi75"

ABP Commercial 7.2.1 / Blazor Server / EF / Non tiered / Separate Host and Tenant DBs / Lepton Theme

Hi,

We have successfully implemented a sub domain based tenant resolver by inheriting from TenantResolveContributorBase and overriding the ResolveAsync method.

When a subdomain for the tenant cannot be resolved (invalid subdomain entered in the URL), we are currently throwing a BusinessException which renders a plain text message on an empty page for the user.

How can we redirect the user to a specific error page in our project from within the ResolveAsync method? Our implementation of the tenant resolver is in the domain project of our Blazor Server solution.

Any recommendations are greatly appreciated.

-Brian

Hi,

LeptonX theme uses SVG as favicon, but SVG favicons is not supported on Safari.

we will fix the problem at the next patch version.

Ok great, thanks! We currently use the Lepton theme (not LeptonX). Can you confirm that the fix will also be done for the Lepton theme?

Thanks!

Thanks @liangshiwei

ABP Commercial 7.2.1 / Blazor Server / EF / Non tiered / Separate Host and Tenant DBs / Lepton Theme

Hi,

We've noticed that the default favicon in the templated solution (described above) does not show in Safari tabs. There is no issue in MS Edge or Google Chrome.

Any ideas or thoughts on this?

Thanks in advance,

Brian

Excellent, thanks @liangshiwei !!

ABP Commercial 7.2.1 / Blazor Server / EF / Non tiered / Separate Host and Tenant DBs / Lepton Theme

The LockAsync method is not marked virtual and therefore cannot be overwritten. UnLockAsync is marked as virtual and is overridable.

Can this be made overridable in a future update?

ABP Commercial 7.2.1 / Blazor Server / EF / Non tiered / Separate Host and Tenant DBs / Lepton Theme

Hi,

The Role UI allows for a role name with a length up to 256 characters, however, the associated AbpPermissionGrants for the role, only allows for the ProviderKey column to have up to 64 characters. Since the role name is stored in the ProviderKey, an SQL exception can occur with long role names.

2023-08-07 22:16:16.993 +00:00 [ERR] An error occurred while saving the entity changes. See the inner exception for details.
Microsoft.EntityFrameworkCore.DbUpdateException: An error occurred while saving the entity changes. See the inner exception for details.
 ---> Microsoft.Data.SqlClient.SqlException (0x80131904): String or binary data would be truncated in table 'test_Web.dbo.AbpPermissionGrants', column 'ProviderKey'. Truncated value: 'Attendance & personal @#$%^&*()_+,.;'':"<>?/\!Updated to be 12345'.
   at Microsoft.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)

ABP Commercial 7.2.1 / Blazor Server / EF / Non tiered / Separate Host and Tenant DBs / Lepton Theme

When hosting an ABP application (Blazor Server), the Abp/ApplicationConfigurationScript endpoint appears to be publicly available, even for users that are not logged in (authenticated).

There is information here that an attacker could potentially exploit.

Please advise if we are misunderstanding something and/or if there are any recommendations in this matter.

Thanks in advance,

Brian

Thanks, looks like you are correct. Thanks for confirming.

Hi mailiming,

When Remember me is clicked the cookie expiration does take effect. This seems somewhat counterintuitive. Isn't the Remember me setting defined in a separate cookie?

Any guidance or information is appreciated.

Thanks