Thanks for the detailed explanation! I appreciate the guidance and understand that LeptonX supports basic collapsing and component replacement.
However, after reviewing the docs and experimenting with custom implementations, I’d like to highlight a gap:
🧭 Missing Guidance While the docs explain how to replace components in general (e.g., with AbpReplaceableComponentsOptions), there is no official step-by-step guide for replacing the sidebar while maintaining:
Compatibility with MainMenu, MenuItemViewModel and ABP’s permission system. Full behavior for inline + floating submenus depending on collapse state. Recommended patterns to build recursive menu trees with submenus, tooltips, or overlays tied to MenuItemViewModel. 🙏 What I need A reference implementation or working sample (even pseudo-code) that shows:
How to completely override the sidebar while preserving ABP integration. How to use MenuItemViewModel to render submenus conditionally (inline vs floating). Best practices when using LeptonX + Blazor for this type of dynamic UX. I’ve already built a working custom version, but it took significant effort due to the lack of official examples or reusable templates. Having proper guidance would help the community and improve productivity for others trying to build modern admin panels with ABP.
Thanks again — looking forward to your input!
Hello ABP Team 👋
I hope you're doing well. I'm reaching out to request your guidance on how to implement a sidebar navigation pattern similar to Fluent UI / modern SaaS layouts, as shown in the attached image.
🧩 Context In many SaaS and admin platforms, a collapsible vertical menu is standard. We're currently building a modular backoffice using ABP Framework + LeptonX + Blazor Server, and while the default sidebar works well, customizing it to support modern UX patterns requires deep overrides and manual logic.
We’ve manually implemented the behavior below, but we’d like to know the correct or recommended way to achieve this using ABP’s native abstractions and components.
📐 Required Features Collapsible Sidebar When expanded: shows icons and labels. When collapsed: shows only icons. Toggled by a button. Floating Submenus (Collapsed Mode) When the menu is collapsed, clicking a parent item should open a floating submenu (popover-style). Inline Submenus (Expanded Mode) When expanded, the same submenu items should appear nested under the parent. Search Support A text box to filter menu items (by DisplayName). Integration with ABP Menu System Fully compatible with MainMenu, MenuItemViewModel, and ABP’s permission-based menu rendering. 📸 Visual Reference The behavior is illustrated in the attached image (Fluent-style menu with floating panels).
🙏 Request Could you please guide us on how to achieve this layout using ABP Framework and LeptonX in a supported way?
If there is a recommended extension point, component to override, or theme configuration to enable this structure, we would highly appreciate your help.
Thanks in advance for your support and great work!
Best regards,
Hello, team 👋 I hope you're doing well. I’m reaching out to request your guidance on setting up a solution architecture using the ABP Framework, where I need to centralize authentication and identity management in a SaaS Admin App, while keeping a second custom modular app completely decoupled and hosted in a separate repository.
🧩 Context I’m designing a multi-application architecture using ABP Framework and Blazor Server, where authentication is centralized but each application has its own independent domain and purpose.
🔧 Solution Overview ✅ App 1: SaaS Admin App (Tiered Architecture)
Based on ABP Framework with a tiered setup: Auth Server, API Host, Blazor UI. Includes all ABP modules, including Pro features, except the Chat module. Manages: Tenant administration User and role management IdentityServer (client and resource management) Intended to be the central authentication provider for other applications. ✅ App 2: Custom Modular App (Decoupled)
Also ABP-based, but: Hosted in a separate repository. Does not use Pro modules (e.g., SaaS, Identity Pro, Feature Management, maybe AuditLoggin). Has its own API Host and Blazor UI. Must authenticate against the Auth Server in App 1 using OpenID Connect (OIDC). Does not replicate identity or tenant logic, only consumes the auth services.
🔐 Requirements Centralized authentication via OpenIddict/IdentityServer hosted in the Admin App. Secure and isolated communication between apps (CORS, scopes, audiences). Seamless authentication/authorization flow between the Custom App and the Auth Server. Clear separation of concerns and dependency boundaries between both applications.
🙏 Request Please provide guidance, a recommended approach, or a project template to implement this architecture using ABP Framework, as described above. I would highly appreciate suggestions on how to properly configure both solutions, ensuring that the custom modular app can securely authenticate and operate without duplicating identity logic. Thank you in advance for your support!
I am reaching out to report that our security tool has detected a possible Trojan (PDM:Trojan.Win32.Generic) in the ABP Studio executable. Below are the details of the alert:
Event: Malicious object detected Application: ABP Studio User: lucas Component: Proactive Watchdog Detection Result: Detected Type: Trojan Name: PDM:Trojan.Win32.Generic Threat Level: High Object Type: Process Object Path: C:\Users\lucas\AppData\Local\abp-studio\current Object Name: volo.abp.studio.ui.host.exe Reason: Database signatures Database Release Date: 02/11/2025 03:06 PM
Since ABP Studio is a tool actively used in our company for development, we need to verify whether this detection is a false positive or if there is a genuine security issue with the installation. To justify the review with our IT security department, we kindly request a detailed report that confirms the legitimacy of this executable.
We appreciate your prompt response and any recommendations on how to proceed in this matter.
Looking forward to your reply.
ABP Support Team, this issue is quite serious and has left my team of six unable to move forward with our projects. It requires an urgent solution and subsequent remediation. However, I can't find any official statement regarding the matter. We invested in a solution with support precisely to receive it.
I'm facing the same issue
@Engincanv Do you have any response or workaround for the request?
