Ignore antiforgery token on token and userinfo endpoint

Resolve #13568
pull/13599/head
maliming 3 years ago
parent 0c4fe0c9af
commit d62605509e
No known key found for this signature in database
GPG Key ID: 096224957E51C89E

@ -1,5 +1,4 @@
using System.Linq;
using System.Threading.Tasks;
using System.Threading.Tasks;
using Microsoft.AspNetCore.Mvc;
using Microsoft.Extensions.DependencyInjection;
using Microsoft.Extensions.Options;
@ -9,6 +8,7 @@ using Volo.Abp.OpenIddict.ExtensionGrantTypes;
namespace Volo.Abp.OpenIddict.Controllers;
[Route("connect/token")]
[IgnoreAntiforgeryToken]
[ApiExplorerSettings(IgnoreApi = true)]
public partial class TokenController : AbpOpenIdDictControllerBase
{

@ -11,6 +11,7 @@ using Volo.Abp.Security.Claims;
namespace Volo.Abp.OpenIddict.Controllers;
[Route("connect/userinfo")]
[IgnoreAntiforgeryToken]
[Authorize(AuthenticationSchemes = OpenIddictServerAspNetCoreDefaults.AuthenticationScheme)]
[ApiExplorerSettings(IgnoreApi = true)]
public class UserInfoController : AbpOpenIdDictControllerBase

Loading…
Cancel
Save