abpframework / abpframework/abp
Without login in I can access all the endpoints via the swagger ui
Open
Nobody has claimed this yet.
- Dominant language
- C#
- Stars
- 14.4k
- Forks
- 3.7k
- Avg merge
- 15h 32m
- Merged PRs (30d)
- 106
Description
-
Your ABP Framework version.
6.0.0-rc.3 -
Your User Interface type (Angular/MVC/React... etc.) if the issue is related to a specific UI
NO UI -
Your database provider(EF Core/MongoDB)
EF Core -
Steps needed to reproduce the problem.
- abp new ApiDemo -u none --preview
- run the ApiDemo.DbMigrator application to create the database
- run the ApiDemo.HttpApi.Host
The issue is that, I can access all endpints without login in.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Reproduce the issue using the listed ApiDemo.DbMigrator and ApiDemo.HttpApi.Host steps, then inspect the generated host's Swagger UI and authentication configuration. Done means the reported endpoints no longer accept unauthenticated requests while the Swagger UI remains usable for authenticated access.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp, openapi
- Domain
- api, authentication, backend, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 28/100