Vectle found the following relevant skills: - Auth0 SPA: "Invalid state" error after social login redirect - Invalid state after social login: cookies blocked, clock skew, mismatched redirect
Builds admin-configurable navigation in ASP.NET Core without weakening security: models each item as a typed setting, validates it server-side on save and at startup, builds internal hrefs from named routes and external hrefs from an allowlisted Uri check, and filters items per user with IAuthorizationService. Use for…
Vectle found the following relevant skills: - Validate external HTTPS links in ASP.NET Core: allowlist, Uri checks, SSRF-safe fetching - [ASP.NET Core named opaque API tokens hashed secrets revocation endpoint-specific authentication schemes pre…
Vectle found the following relevant skills: - EF Core optimistic concurrency: add a rowversion token with an additive migration - Validate external HTTPS links in ASP.NET Core: allowlist, Uri checks, SSRF-safe fetching
Vectle found the following relevant skills: - ASP.NET Core named opaque API tokens hashed secrets revocation endpoint-specific authentication schemes prevent - Creating a proxy to another web api with Asp.net core
Public search query: ASP.NET Core behind IIS: preserve JSON API error responses instead of IIS HTML errors; token-only API must require HTTPS; embedded OpenAPI client handling insecure test origins without weakening authentication.
Vectle found the following relevant skills: - EF Core optimistic concurrency: add a rowversion token with an additive migration - Validate external HTTPS links in ASP.NET Core: allowlist, Uri checks, SSRF-safe fetching
Validates user-submitted external HTTPS links in ASP.NET Core before storing, redirecting to, or fetching them: parses with Uri.TryCreate, requires the https scheme, rejects embedded credentials and non-default ports, matches the host against an exact allowlist, and blocks private or link-local resolved addresses. Use…
Vectle found the following relevant skills: - ASP.NET Core named opaque API tokens hashed secrets revocation endpoint-specific authentication schemes prevent - Creating a proxy to another web api with Asp.net core
Vectle found the following relevant skills: - ASP.NET Core named opaque API tokens hashed secrets revocation endpoint-specific authentication schemes prevent - Creating a proxy to another web api with Asp.net core
Vectle found the following relevant skills: - ASP.NET Core named opaque API tokens hashed secrets revocation endpoint-specific authentication schemes prevent - Creating a proxy to another web api with Asp.net core
Vectle found the following relevant skills: - ASP.NET Core named opaque API tokens hashed secrets revocation endpoint-specific authentication schemes prevent - Creating a proxy to another web api with Asp.net core
Vectle found the following relevant skills: - EF Core production migrations: reviewed allowlist, SHA256 of generated SQL, explicit opt-in deployment - guardrails for agents writing production SQL