Activities of "Rajasekhar"

• ABP Framework version: v4.4.2
• UI type: MVC
• DB provider: EF Core
• Tiered (MVC): no
• Exception message and stack trace: Sensitive API end points like account-admin revealed in sourcecode
• Steps to reproduce the issue:"

• ABP Framework version: v4.4.2
• UI type: MVC
• DB provider: EF Core
• Tiered (MVC): no
• Exception message and stack trace: As observed that, application disclose application configuration file to end user.
• Steps to reproduce the issue:" As observed that, application disclose application configuration file to end user.

https://example.com/Abp/ApplicationConfigurationScript

Shall I encrypt this https://example.com/Abp/ServiceProxyScript

I want to encrypt this(https://example.com/Abp/ServiceProxyScript) for security reasons is it possible

• ABP Framework version: v5.0.0
• UI type: MVC
• DB provider: EF Core
• Tiered (MVC) or Identity Server Separated (Angular): no
• Exception message and stack trace:
• Steps to reproduce the issue:"

We have deployed the ABP application for security testing and we have got CSP header missing Vulnerability

Please let us know how to configure the sever to return Content Security Policy HTTP header.

• ABP Framework version: v5.0.0
• UI type: MVC
• DB provider: EF Core
• **Tiered (MVC) **: yes
• Exception message and stack trace:
• Steps to reproduce the issue:"

Is API based authentication exist? apart from openid

• ABP Framework version: v5.0.0
• UI type: MVC
• DB provider: EF Core
• Tiered (MVC): yes
• Exception message and stack trace:
• Steps to reproduce the issue:"

How to create access_token and refresh token manually by using identity server

• ABP Framework version: v5.0.1
• UI type: MVC
• DB provider: EF Core
• **Tiered (MVC) **: yes
• Exception message and stack trace:
• Steps to reproduce the issue:"

I am calling the api(https://localhost:5001/connect/token) for authentication. I am getting the access token and refresh token successfully using password flow (grant type). After enabling the TFA for that user ,I am getting the response like Required TFA ** (https://localhost:5001/connect/token) **response. how to handle the TFA with password flow.

• ABP Framework version: 5.1.4
• UI type: MVC
• DB provider: EF Core
• Tiered (MVC): no
• Exception message and stack trace:
• Steps to reproduce the issue:"

Hi I am trying to customize the identity server module to multitenant support. I have added the domain,domain.shared and ef modules. then removed the ignoremultitenancy support attribute from IdentityServerDbContext.

And I have added IMultiTenant to all entities related to Identityserver like clients,apiresources entities and also mapped the tenant attribute in IdentityServerDbContextModelCreatingExtensions.cs

then I am trying to do the migration using dbcontext getting below error,

Method not found: 'System.Nullable`1<System.Guid> Volo.Abp.IdentityServer.Clients.Client.get_TenantId()'.

Please help me for this issue

If you're creating a bug/problem report, please include followings:

• ABP Framework version: 5.1.4
• UI type: MVC
• DB provider: EF Core
• Tiered (MVC) or Identity Server Separated (Angular): yes
• Exception message and stack trace:
• Steps to reproduce the issue:"

Azure AD authentication working as we expected but single sign-out not happening even though logout url configured in the azure portal (app registration)

• ABP Framework version: v5.0.1
• UI type: MVC
• DB provider: EF Core
• Tiered (MVC) or Identity Server Separated (Angular): no
• Exception message and stack trace:
• Steps to reproduce the issue:"

How to add the validation rule for existing properties, I want to add validation attribute to role name is there any extension method you have please let me know