tsai/abp - abp - Gitea: Git with a cup of tea

Commit Graph

Author	SHA1	Message	Date
maliming	d79fa71b41	Derive the OpenIddict opt-in URLs from the configured server endpoints	6 days ago
maliming	ab1daeeacd	Match opt-in URLs the same way as IgnoredUrls	6 days ago
maliming	e35825dc8a	Simplify OpenIddict endpoint path normalization	6 days ago
maliming	f1e28e0ebc	Match the path base and normalize OpenIddict opt-in endpoint paths - Rename completedOnResponseStarting and fix response-start completion comments and docs	6 days ago
maliming	eaf1bf6fe3	Add opt-in options for completing the unit of work on response start - Enable globally via CompleteUnitOfWorkOnResponseStarting or per path via the Urls list - OpenIddict opts in its endpoints so token/session rows commit before the response	6 days ago
maliming	cdb8a1c805	Rename `IsValidateAsync` to `IsValidAsync`	1 week ago
maliming	7b24d3d49f	Reject invalid identity session cookies instead of signing them out	1 week ago
voloagent	653de5a8c8	Update_NPM_Packages	1 week ago
maliming	28aa0bc852	Bump `@abp/ng.account` to rc.2 in cms-kit Angular demo	2 weeks ago
voloagent	6addd7e146	Update_NPM_Packages	2 weeks ago
maliming	6a525aacd9	Shorten the action menu and feature dialog comments	2 weeks ago
maliming	d2f2572aff	Keep the action menu origins and the accessible name of labeled activators	2 weeks ago
maliming	3da670f32d	Carry the tenant id in the GDPR events - Delete the link users after the user is saved, a concurrency failure kept them deleted - Create organization units of the current tenant only and insert them after every group is valid	2 weeks ago
maliming	3c1c69728a	Focus the first input of MudBlazor dialogs opened from action menus	2 weeks ago
maliming	dd396d1c8e	Do not validate the user while deleting it	2 weeks ago
maliming	4196f1c816	Remove all related data when deleting a user - Clear password histories and passkeys, load the collections if they are missing - Delete sessions, user delegations and link users with UserDeletedEventHandler - Add OrganizationUnitManager.CreateManyAsync	2 weeks ago
maliming	24a2315eea	Make password visibility toggles accessible	3 weeks ago
maliming	1fd5f8c588	Render only the active tab in MudBlazor permission and feature modals	3 weeks ago
voloagent	d9ae95d2de	Update_NPM_Packages	3 weeks ago
maliming	cb7667557b	Update user's last sign-in time in a separate unit of work	4 weeks ago
maliming	4681a852e3	Add HasAbpJsonConversion property builder extension	4 weeks ago
maliming	14a1ee369d	Fix resource permission modal losing the selected lookup service	4 weeks ago
maliming	7f49e94d31	Add Korean (ko) localization for remaining framework and module resources	4 weeks ago
maliming	2766518254	Fall back to SignedIn when LastAccessed is null in inactive session cleanup	4 weeks ago
maliming	7d3ba2ec40	Map IdentityUserPasskey.Data as a json column for MySQL providers	4 weeks ago
maliming	25fecd927b	Reload the page after a feature or permission change affecting the current user The MVC toolbars and menus are rendered on the server and cannot reflect the change otherwise	4 weeks ago
maliming	181ca6745f	Handle mud message alert and menu updates on the dispatcher	4 weeks ago
voloagent	58d7243319	Update_NPM_Packages	1 month ago
voloagent	aa20636352	Update_NPM_Packages	1 month ago
maliming	53a9a0c94b	Ignore `OpenIddictAuthorization` navigation changes when creating tokens	1 month ago
voloagent	ab8d46d1a0	Update_NPM_Packages	1 month ago
maliming	71da95e1d9	Use a per-connection in-memory SQLite database in unit tests	2 months ago
maliming	4fb0403e90	Move Docs TableOfContents helper to Web layer to fix tiered DI ITocGeneratorService is a presentation helper for rendering, not a remote application service, so it must be registered on the web tier.	2 months ago
maliming	1688132040	Remove trailing whitespace in DependsOn attribute	2 months ago
雷荣华	c5d80ea500	fix: add dependency on DocsCommonHttpApiClientModule in DocsAdmin and Docs modules	2 months ago
maliming	fb6ef5faf0	Add MudBlazor Basic theme projects to the module	2 months ago
selman koc	d614fadcaa	Update @abp/ng.account dependency version	2 months ago
voloagent	884d57d4f2	Update_NPM_Packages	2 months ago
maliming	592aa2865b	Keep the collapsed docs options bar transparent and its focus ring keyboard-only - reset background/border/shadow on :not(.is-open) so hover/focus cannot leak the panel look - return focus to the button only on Escape close, not on outside-click	2 months ago
maliming	551ac6ebe1	Improve docs options toggle accessibility and handler safety - add a :focus-visible ring on the toggle button for keyboard users - keep the info line visible in the popover - namespace and unbind the toggle handlers to avoid stacking on re-init	2 months ago
maliming	053ec26753	Make docs options floating button a real toggle for touch and keyboard - reveal on click (.is-open) instead of hover so touch devices can open it - hide the collapsed bar instantly to stop the translucent flash on scroll	2 months ago
SALİH ÖZKARA	8b297c2293	Skip dynamic permission initialization during migrations	2 months ago
maliming	e101f3161f	Add tests and demo app for background job worker enhancements	2 months ago
maliming	4a59baa740	Support completion persistence and job name filtering in the background jobs module	2 months ago
maliming	c9b57fe0f0	Collapse docs document options bar into a floating button	2 months ago
voloagent	998e26710f	Update_NPM_Packages	2 months ago
maliming	30119d7d90	Refactor client_id cookie cleanup into an options extension - move OnRefreshingPrincipal logic to AbpOpenIddictSecurityStampValidatorOptionsExtensions - add unit tests for removal and callback composition order	2 months ago
gdlcf88	f9493d6dec	Prevent OpenIddict client_id from leaking into the interactive auth cookie When the cookie security stamp is refreshed during a /connect/authorize request, OpenIddictClaimsPrincipalContributor stamps the ambient request's client_id onto the principal that is written back to the interactive authentication cookie. From then on ICurrentClient.Id resolves to that client for every later cookie-authenticated request, corrupting audit-log client attribution. The contributor cannot tell whether the principal it contributes to is destined for a token (correct) or for the cookie being refreshed (wrong), so strip client_id at the only point where the cookie is actually re-written: the security-stamp OnRefreshingPrincipal callback. This never runs for token issuance, so the token path is untouched, and chaining the removal after the existing AbpSecurityStampValidatorCallback.UpdatePrincipal lets already-corrupted cookies self-heal on their next refresh. Adds Volo.Abp.OpenIddict.AspNetCore.Tests covering the removal and the callback composition order. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2 months ago
Ebicoglu	25b5b7b929	Update volosoft-presentation.pptx	2 months ago
maliming	320a7ae8f0	Bump Microsoft.* and System.* packages to 10.0.9 Also update Microsoft.Extensions.Caching.Hybrid to 10.7.0 and Microsoft.Data.SqlClient to 7.0.2.	2 months ago

1 2 3 4 5 ...

8867 Commits (2ddbb08cbf56c53bb1fc1e2fa2eff635a4250e47)