0
samara081 created
We have MVC with .Net Core 6. Aspnet zero 11.4
Our security team raised security issue that AbpServiceProxies/GetAll for dynamic APIs is exposed for public. and we have to make secured just for authenticated users. Is there any way to make it secured without affecting the system
Thanks
Markdown is supported
Copy & paste or drag & drop images (max 30 MB per image)
1 Answer(s)
-
0
Hi @samara081
Unfortunately securing this endpoint will cause some problems. Output of this endpoint is used by not authorized pages. If you still want to do this, you can create a copy of https://github.com/aspnetboilerplate/aspnetboilerplate/blob/dev/src/Abp.AspNetCore/AspNetCore/Mvc/Proxying/AbpServiceProxiesController.cs and prevent access to existing AbpServiceProxies controller by writing a custom middleware.
Markdown is supportedCopy & paste or drag & drop images (max 30 MB per image)
