Yes dear fixed thank you
We need to deal with low level (Repository level) for performance issue
this is an issue when deal with available repository the system not updated the cache so we need the name of cache related with permission module to reset it
Dear Same code in production and dev and there is no explicitly settings related with it if you have correct setting should set please provide
This is remove, but when I added to repository it is a new permission but not reflected after the user logged in
I couldn't shared the project because for security issue how I can stop the cache for clients with out stop redis 1- after enable the redis the problem occured 2- this problem just appeare in production not in dev 3- how can I stop caching for cliens (openIddict)
[maliming] said: hi
Angular needs to call this API endpoint to initialize when the user is not logged in. You can't remove it.
https://abp.io/docs/latest/framework/api-development/standard-apis/configuration
This is by design.
Thanks.
the link you shared contains a way to extend the endpoint and append more data again we are not trying to remove it we need to reduce some of the data in the response
how and where to override this ?
No configuration is changed
ABP Framework v 9.0.1 Angular Tiered Separated Auth
Also We have a Microservice project with angular app
I'm not saying it's revealing secret and it doesn't have to reveal a secret to become a "Security Issue"
I'm saying this increase the attack surface on the application
is there a way to minimize that exposure ? an anonymous doesn't need to know my lockout policy nor my password policy and what it looks like