Avata Suljettu

External Provider API is exposing key value #2743

User avatar
0
shobhit luotu
  • ABP Framework version: v4.2.2
  • UI type: Angular
  • DB provider: EF Core
  • Tiered (MVC) or Identity Server Separated (Angular): yes
  • Exception message and stack trace:
  • Steps to reproduce the issue:"
  1. access api url: https://myapi.com/api/account/external-provider/by-name?Name=<provider> like Google
  2. user can get all details about external provider configuration
  3. this is not secured
Siirry hyväksyttyyn vastaukseen
1 Vastaus (t)
  • User Avatar
    0
    maliming luotu
    Tukitiimi Fullstack Developer

    user can get all details about external provider configuration

    these are public info not including the secrets.

Valtuutettu
User avatar maliming
Tarrat
Ei vielä
Made with ❤️ on ABP v8.2.0-preview Updated on maaliskuuta 25, 2024, 15.11