Update

framework/src/Volo.Abp.AspNetCore/Volo/Abp/AspNetCore/Security/IgnoreAbpSecurityHeader.cs

@@ -1,8 +1,6 @@
 using System;
 
 namespace Volo.Abp.AspNetCore.Security;
-
-[AttributeUsage(AttributeTargets.Class)]
 public class IgnoreAbpSecurityHeaderAttribute : Attribute
 {
     

modules/openiddict/src/Volo.Abp.OpenIddict.AspNetCore/Volo/Abp/OpenIddict/Controllers/AuthorizeController.cs

@@ -20,7 +20,7 @@ namespace Volo.Abp.OpenIddict.Controllers;
 public class AuthorizeController : AbpOpenIdDictControllerBase
 {
     [HttpGet, HttpPost]
-    [IgnoreAntiforgeryToken, IgnoreAbpSecurityHeader]
+    [IgnoreAntiforgeryToken]
     public virtual async Task<IActionResult> HandleAsync()
     {
         var request = await GetOpenIddictServerRequestAsync(HttpContext);