Activities of "balessi75"

Thanks @liangshiwei

ABP Commercial 7.2.1 / Blazor Server / EF / Non tiered / Separate Host and Tenant DBs / Lepton Theme

Hi,

We've noticed that the default favicon in the templated solution (described above) does not show in Safari tabs. There is no issue in MS Edge or Google Chrome.

Any ideas or thoughts on this?

Thanks in advance,

Brian

Excellent, thanks @liangshiwei !!

ABP Commercial 7.2.1 / Blazor Server / EF / Non tiered / Separate Host and Tenant DBs / Lepton Theme

The LockAsync method is not marked virtual and therefore cannot be overwritten. UnLockAsync is marked as virtual and is overridable.

Can this be made overridable in a future update?

ABP Commercial 7.2.1 / Blazor Server / EF / Non tiered / Separate Host and Tenant DBs / Lepton Theme

Hi,

The Role UI allows for a role name with a length up to 256 characters, however, the associated AbpPermissionGrants for the role, only allows for the ProviderKey column to have up to 64 characters. Since the role name is stored in the ProviderKey, an SQL exception can occur with long role names.

2023-08-07 22:16:16.993 +00:00 [ERR] An error occurred while saving the entity changes. See the inner exception for details.
Microsoft.EntityFrameworkCore.DbUpdateException: An error occurred while saving the entity changes. See the inner exception for details.
 ---> Microsoft.Data.SqlClient.SqlException (0x80131904): String or binary data would be truncated in table 'test_Web.dbo.AbpPermissionGrants', column 'ProviderKey'. Truncated value: 'Attendance & personal @#$%^&*()_+,.;'':"<>?/\!Updated to be 12345'.
   at Microsoft.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)

ABP Commercial 7.2.1 / Blazor Server / EF / Non tiered / Separate Host and Tenant DBs / Lepton Theme

When hosting an ABP application (Blazor Server), the Abp/ApplicationConfigurationScript endpoint appears to be publicly available, even for users that are not logged in (authenticated).

There is information here that an attacker could potentially exploit.

Please advise if we are misunderstanding something and/or if there are any recommendations in this matter.

Thanks in advance,

Brian

Thanks, looks like you are correct. Thanks for confirming.

Hi mailiming,

When Remember me is clicked the cookie expiration does take effect. This seems somewhat counterintuitive. Isn't the Remember me setting defined in a separate cookie?

Any guidance or information is appreciated.

Thanks

ABP Commercial 7.2.1 / Blazor Server / EF / Non tiered / Separate Host and Tenant DBs / Lepton Theme

Hi, We are trying to change the user's session cookie expiration from "session" to a limited time frame.

We added the following in our BlazorModule.cs implementation of the ConfigureServices() method, but the cookie always still has an expiration of "Session" when we view the cookie in the browser tools. What might we be missing?

Thanks in advance...

     context.Services.ConfigureApplicationCookie(ops =>
        {
            ops.Cookie.Name = "AspNetCore.Identity.Application";
            ops.ExpireTimeSpan = TimeSpan.FromMinutes(1);
            ops.SlidingExpiration = true;
        });

Thanks for confirming @maliming