Activities of "maliming"

你好， 请分享你的项目信息。

• Your ABP Framework version.
• Your User Interface type (Angular/MVC/React... etc.) if the issue is related to a specific UI
• Your database provider(EF Core/MongoDB)
• Exception message and stack trace if available (check the logs).
• Please share the steps and code to reproduce the problem.

Great

hi

Can you re-login your developer account, then create a new project with the same name?

Then copy the AbpLicenseCode in appsettings.secrets.json file from the new project to your POC project.

Thanks.

hi

Can you try to override the Blazor FeatureManagementModal?

Typically, a feature will have a default value

using Volo.Abp.DependencyInjection;
using Volo.Abp.FeatureManagement.Blazor.Components;
using Volo.Abp.Features;

namespace EagEz.Fvp.Blazor;

[ExposeServices(typeof(FeatureManagementModal))]
[Dependency(ReplaceServices = true)]
public class MyFeatureManagementModal : FeatureManagementModal
{
    protected override bool IsDisabled(string providerName)
    {
        return providerName != null && providerName != ProviderName && providerName != DefaultValueFeatureValueProvider.ProviderName;
    }
}

hi

Is your problem solved?

Thanks

hi

is there a way to bind token to specific device.

Third parties can also steal your cookie if the access token can be stolen.

Binding is meaningless.

Thanks.

hi

access token can be spoofed or stolen

First, the access token can't be spoofed.

Then, if your Angular and server use HTTPS, it's also unlikely that the token gets stolen.

If the other party can steal your access token, then they can also steal the username and password, adding a session cookie will not provide protection.

Thanks.

hi

What is the exception detail?

Thanks.

hi

and we want to securely associate each access token with a unique session identifier stored in a HttpOnly cookie.

Are you worried that the access token will be leaked?

Thanks.

But I couldn't reproduce the problem in a new microservice template after configuring WebRemoteDynamicClaimsPrincipalContributorOptions.

The dynamic claims works.