Halil İbrahim Kalkan
ccd673cf20
Guard UoW completion during response start
This change hardens `AbpUnitOfWorkMiddleware` to avoid invalid second completion attempts when the response starts during end-of-pipeline UoW completion, and to skip early completion while a shared child UoW scope is still active. It adds active child-scope tracking in `UnitOfWorkExtensions`/`ChildUnitOfWork`, updates option docs to clarify behavior, and adds MVC tests plus controller/event-handler scenarios covering child-scope response flush and event-driven response writes during completion.
1 week ago
maliming
ab1daeeacd
Match opt-in URLs the same way as IgnoredUrls
1 week ago
maliming
f5c55db852
Add a path base matching test and document opt-in path matching
1 week ago
maliming
f1e28e0ebc
Match the path base and normalize OpenIddict opt-in endpoint paths
- Rename completedOnResponseStarting and fix response-start completion comments and docs
1 week ago
maliming
eaf1bf6fe3
Add opt-in options for completing the unit of work on response start
- Enable globally via CompleteUnitOfWorkOnResponseStarting or per path via the Urls list
- OpenIddict opts in its endpoints so token/session rows commit before the response
1 week ago
maliming
7b24d3d49f
Reject invalid identity session cookies instead of signing them out
2 weeks ago
maliming
4bd160565d
Complete only the reserved unit of work on response start
2 weeks ago
maliming
011258793f
Commit ambient unit of work before the response starts
2 weeks ago
maliming
38c651767e
Support HTTP QUERY method
- Treat QUERY as a safe method like GET: excluded from audit logging and non-transactional UOW
- Add HTTP verb constants and Is* helpers to HttpMethodHelper
2 months ago
maliming
6895d24d5a
feat: Enhance URL-based culture handling with new interfaces and async methods
5 months ago
maliming
420c860b08
feat: Implement URL-based culture handling in Blazor and MVC requests
5 months ago
maliming
c36823fe4a
feat: Enhance route-based culture handling by inserting RouteDataRequestCultureProvider after QueryStringRequestCultureProvider
5 months ago
maliming
dc3e633606
feat: Implement route-based culture support in localization.
5 months ago
maliming
c67db4ff15
refactor: remove IClientIpAddressProvider and replace with IWebClientInfoProvider in operation rate limiting
6 months ago
maliming
6f157406e0
Add Volo.Abp.OperationRateLimit module
6 months ago
maliming
a881195b3b
refactor: streamline TickerQ initialization and enhance service access methods
6 months ago
maliming
27179a007c
Support dynamic client credentials in token introspection
```cs
AddAbpOpenIdConnect("oidc", options =>
{
//...
options.ClientId = configuration["AuthServer:ClientId"];
options.ClientSecret = configuration["AuthServer:ClientSecret"];
options.UsePkce = true;
//...
options.Events.OnTokenResponseReceived = ctx =>
{
ctx.Properties?.SetString("client_id", configuration["AuthServer:ClientId"]);
ctx.Properties?.SetString("client_secret", configuration["AuthServer:ClientSecret"]);
return Task.CompletedTask;
};
});
```
8 months ago
maliming
71bc239f88
Refactor token expiration handling in cookie auth options
8 months ago
maliming
5d84359a97
Refactor token validation in CookieAuthenticationOptionsExtensions
Resolve #24468
8 months ago
maliming
d851f95ba0
Remove development mode static assets mapping logic
https://github.com/dotnet/aspnetcore/issues/59673#issuecomment-3259182522
12 months ago
maliming
3ff8fb6e78
Upgrade to .NET 10.0.
1 year ago
erdemcaygor
38805d14f5
code refactoring
1 year ago
maliming
77cc8535e8
Use `Duende.IdentityModel` to replace `IdentityModel`.
1 year ago
maliming
814f44d533
Enhance security headers middleware to improve header management and add tests for ignored headers
1 year ago
maliming
25c815985d
Refactor security headers middleware to reintroduce essential security headers and improve code organization.
1 year ago
maliming
029db2b112
Use `MyCSharp.HttpUserAgentParser` to replace `DeviceDetector.NET` for better performance.
1 year ago
maliming
3f098f2dfc
Update obsolete attribute message for UseAbpClaimsMap method
1 year ago
maliming
44abba0900
Refactor timezone handling to use local time zone retrieval and remove deprecated methods
1 year ago
maliming
98fbeaf656
Refactor timezone retrieval logic to prioritize settings, request, and server fallback
1 year ago
maliming
691aac8b19
Set default `TimeZone` to empty and get from local time.
1 year ago
maliming
d6f5784bd9
Add `ExcludeExceptionFromLoggerSelectors` to `AbpExceptionHandlingOptions` to skip output exception to logger.
1 year ago
maliming
b82be5ec77
Support blazor no-layers project.
2 years ago
maliming
912a909a0b
Map static assets if there is a blazor client project.
2 years ago
maliming
99ee64b7e8
Add browser timezone handling and cookie management for unauthenticated users
2 years ago
maliming
f3f14a8dd9
Implement timezone override in middleware from request sources and add unit tests
2 years ago
maliming
d68bcdeb03
Add `ICurrentTimezoneProvider` and `AbpTimeZoneMiddleware`.
2 years ago
EngincanV
5576ef5d8f
Update AbpApplicationBuilderExtensions.cs
2 years ago
maliming
eca1cd4936
Update AbpApplicationBuilderExtensions.cs
2 years ago
maliming
901021e40f
Create `staticwebassets.endpoints.json` if it doesn't exist.
2 years ago
maliming
04165fd543
Use `StaticFiles` instead of `MapStaticAssets` in `Development`.
2 years ago
maliming
59b015dc73
Skip to add security headers if endpoint has `IgnoreAbpSecurityHeaderAttribute`.
2 years ago
maliming
d091bde8c4
Ignore `defaultLanguage` if there is only one language.
2 years ago
maliming
55aab15704
Use `UseVirtualStaticFiles` for `AllowedExtraWebContentFolders` first.
Resolve #21592
2 years ago
liangshiwei
1946e5e153
Update AspNetCoreAuditLogContributor.cs
2 years ago
liangshiwei
9354f0fd50
Add options to include/exclude query schema and host
2 years ago
maliming
41f9e0b546
Add a extension method that using `WebRootFileProvider`.
2 years ago
Berkan Sasmaz
eec8e75855
Rename parameter
2 years ago
Berkan Sasmaz
6a008282d3
Add `UseStaticFilesForPatterns` extension method to `IApplicationBuilder`
2 years ago
maliming
984a775217
Do not set `IHttpAuthenticationFeature`.
Because it uses the same object as `IAuthenticateResultFeature`.
2 years ago
ahmetfarukulu
53ec3a6e5f
Language edit problem fixed
2 years ago