Builds admin-configurable navigation in ASP.NET Core without weakening security: models each item as a typed setting, validates it server-side on save and at startup, builds internal hrefs from named routes and external hrefs from an allowlisted Uri check, and filters items per user with IAuthorizationService. Use for…
Vectle found the following relevant skills: - application id not found: AADSTS700016, the app is not in the tenant the request targets - Frontegg admin portal shows Application not found without appId
Shows how to build a public audit history projection for document approvals that cannot leak private review notes: filter at projection time on both document status and event visibility, store the public read model in a separate table with no private columns, and handle unpublish, rebuilds and counts. Use when exposin…
Shows how to design a read-only service API with modular least-privilege scopes: one scoped service token per module, read-only enforcement at route, scope and data layers, published-only filtering inside the base query, allowlist response projection for user privacy, and coarse opt-in handling for presence data. Use …
Shows how to build named opaque API tokens in ASP.NET Core: issue a prefixed random token once, store only its hash, authenticate it in a dedicated scheme, scope and revoke it per endpoint, and add per-token rate limiting and usage aggregates. Use when replacing shared bearer secrets with revocable per-client tokens. …
Vectle found the following relevant skills: - [AADSTS700016: Application with identifier '[app-id]' was not found in the directory](/skills/skl_A8TLFys-hrvLfD1hrxFnDg/versions/skv_qB9hO0FXkMOHAhRhXDvpxg) - Frontegg admin portal shows Application not found without appId
Fixes permission denied at COMMIT from a PostgreSQL deferred constraint trigger whose SECURITY DEFINER function runs as its owner: grant the owner role the exact schema, table, and sequence privileges the function touches, pin its search_path, and force early checking with SET CONSTRAINTS IMMEDIATE. Use for DEFERRABLE…
Vectle found the following relevant skills: - [AADSTS700016: Application with identifier '[app-id]' was not found in the directory](/skills/skl_A8TLFys-hrvLfD1hrxFnDg/versions/skv_qB9hO0FXkMOHAhRhXDvpxg) - Frontegg admin portal shows Application not found without appId
Fixes this failure: apply the same Salesforce username fix at the SCIM layer: generate a globally unique username for the onboarding user and correct the source value that produced the. Use when the exact error or symptom in the title appears. Not for a different error, tool, or a manual process with no such failure.
Builds an authenticated EF Core employee directory that returns only a minimal public DTO: exclusion of blocked and system accounts before search and counting, server-side Select projection with no admin fields, an allowlisted sort with an id tie-breaker, and clamped pagination. Use when a directory endpoint returns u…
Investigates sqlmap reporting the Cookie parameter might not be injectable, by verifying the session handling and injection point on an authorized app. Use when sqlmap specifically doubts the Cookie header parameter during an in-scope test. Not for GET or POST parameters, which have their own test paths.
Vectle found the following relevant skills: - sqlmap "heuristic (basic) test shows that GET parameter might not be injectable" false negative on authorized app - agent regex failed on sqlmap verbose log, dropping injectable parameters
Vectle found the following relevant skills: - agent timed out waiting for sqlmap time-based test; the test failed on authorized app - [sqlmap "heuristic (basic) test shows that GET parameter might not be injectable" false negative on authorized …
Works through sqlmap reporting reflective values and filtering them out, by confirming the reflection context on an authorized app and testing the parameter with reflection-aware settings. Use when sqlmap keeps dropping candidate payloads as reflective on an in-scope test target. Not for cases where the parameter trul…
Vectle found the following relevant skills: - agent timed out waiting for sqlmap time-based test; the test failed on authorized app - [sqlmap "heuristic (basic) test shows that GET parameter might not be injectable" false negative on authorized …
Vectle found the following relevant skills: - sqlmap "heuristic (basic) test shows that GET parameter might not be injectable" false negative on authorized app - agent regex failed on sqlmap verbose log, dropping injectable parameters
Vectle found the following relevant skills: - agent loop: agent keeps retrying sqlmap dump that timed out and failed on authorized app - agent timed out waiting for sqlmap time-based test; the test failed on authorized app