Activities of "maliming"

hi

Can you share the full code of your public web module?

ConfigureAuthentication

Thanks.

Hi,

Thanks for the screenshot. Let me address the errors you're seeing:

Yellow warnings (non-critical): The three "DevTools failed to load source map" warnings (.map files returning 404) are harmless — these are only needed for debugging and don't affect your app's functionality.

Red error: The MONO_WASM: ParseAttributes:2e code generation failed: RangeError: WebAssembly.Compile is disallowed on the main thread, if the buffer size is larger than 4KB is a Chrome browser limitation. Chrome restricts synchronous WebAssembly compilation on the main thread for modules larger than 4KB. When this happens, the Mono runtime falls back to interpreted execution for that method, which is usually non-fatal — the app should still work, just slightly slower for that code path.

Could you provide a bit more context?

1. What version of .NET / ABP are you using?
2. Does the app load correctly when online? Or does it fail in both online and offline modes?
3. Are you seeing a blank/stuck loading screen, or does it actually crash with an error?
4. Can you try it in the latest Chrome browser?

If the app works online but fails only when offline, the issue is likely related to the service worker not caching all required Blazor assets properly. In that case, try clearing the browser cache and service worker registration (DevTools → Application → Storage → Clear site data), then reload online first to let the service worker re-cache everything.

Thanks

hi

Request sent You’ll get an email letting you know if your request was approved

Thanks.

Hi,

Thanks for testing that. Since the local Production mode works fine, the issue is definitely something specific to your deployed environment.

We confirmed the /api/cms-kit-public/menu-items endpoint returns a 302 redirect to the OIDC login page, so something is forcing authentication on all requests. Could you share a few code snippets to help us find the cause?

1. The Program.cs or Startup.cs of your public website project — mainly the auth-related parts.

2. The main module class of the public website (e.g., YourPublicWebModule.cs) — the ConfigureServices and OnApplicationInitialization methods.

3. Could you also do a quick search in your public website project for FallbackPolicy, RequireAuthenticatedUser, DefaultPolicy, and AddAuthorization? Just paste any matches you find.

4. The appsettings.Production.json from the deployed server (just redact any secrets/connection strings).

No need to share the full project — just these parts should be enough for us to spot the problem.

Thanks

: )

Hi,

The Reset Password page is served by the Auth Server (MVC), not the Angular UI. So you need to customize it in your Auth Server project.

You can override the ResetPassword.cshtml page by creating the same file in your Auth Server project under Pages/Account/ResetPassword.cshtml:

@page
@inject IHtmlLocalizer<AccountResource> L
@inject IHtmlLocalizer<IdentityResource> LI
@using Microsoft.AspNetCore.Mvc.Localization
@using Volo.Abp.Account.Localization
@using Volo.Abp.AspNetCore.Mvc.UI.Packages.Zxcvbn
@using Volo.Abp.Identity.Localization
@model Volo.Abp.Account.Public.Web.Pages.Account.ResetPasswordModel
@inject Volo.Abp.AspNetCore.Mvc.UI.Layout.IPageLayout PageLayout
@{
    PageLayout.Content.Title = L["ResetPassword"].Value;
}

@if (!Model.LocalLoginDisabled)
{
    @if (Model.InvalidToken)
    {
        <div class="alert alert-danger">
            @LI["Volo.Abp.Identity:InvalidToken"]
        </div>
        <a asp-page="./ForgotPassword" class="btn btn-link px-0">@L["ForgotPassword"]</a>
    }
    else
    {
        @section scripts
        {
            <abp-script-bundle name="@typeof(Volo.Abp.Account.Public.Web.Pages.Account.ResetPasswordModel).FullName">
                <abp-script type="@typeof(ZxcvbnScriptContributor)"/>
                <abp-script src="/Pages/Account/PasswordComplexityIndicator.js"/>
                <abp-script src="/Pages/Account/ResetPassword.js"/>
            </abp-script-bundle>
        }
        
        <div class="account-module-form">
            <form method="post">
                <p>@L["ResetPassword_Information"]</p>

                <abp-input asp-for="UserId"/>
                <abp-input asp-for="ResetToken"/>
                <abp-input asp-for="Password"/>
                <abp-input asp-for="ConfirmPassword"/>

                <a abp-button="Secondary" asp-page="./Login" asp-route-returnUrl="@Model.NormalizeReturnUrl">@L["Cancel"]</a>
                <abp-button type="submit" button-type="Primary" text="@L["Submit"].Value"/>
            </form>
            <div class="mt-3">
                <a asp-page="./ForgotPassword" class="btn btn-link px-0">@L["ForgotPassword"]</a>
            </div>
        </div>
    }
}

This adds a "Forgot Password" link in two places:

• When the reset token is invalid, so the user can request a new one.
• Below the reset password form, as a general navigation option.

You can adjust the placement based on your preference. No code-behind file is needed since the default ResetPasswordModel already handles everything.

See also: https://abp.io/docs/latest/framework/ui/mvc-razor-pages/customization-guide#overriding-a-razor-page

Thanks

hi

If you switch your local ASPNETCORE_ENVIRONMENT environment to Production, can you reproduce the issue?

Thanks.

hi

You can also try it in a new template project. If you can reproduce the issue, I can take a look at it too.

Thanks.

hi

Can you share your project source code? I will check the code to find the cause.

liming.ma@volosoft.com

Thanks.

Hi,

To help diagnose the issue, could you please provide some more details?

1. When you say "local environment works", did you verify the menus and home page are visible while not logged in (anonymous/incognito browser)? Or was the testing done while still authenticated?

2. How does your production public website resolve the tenant for anonymous visitors? (e.g., subdomain like tenant.yourdomain.com, a separate domain, query string ?__tenant=, or something else?)

3. Could you open the browser developer tools (Network tab) on your production public website while not logged in, and check what response is returned for /api/cms-kit-public/menu-items? Please share the HTTP status code and response body.

4. If possible, could you share the URL of your production public website so we can check directly?

Thanks