damienbod/bff-aspnetcore-angular

Backend for frontend security using Angular Standalone (nx) and ASP.NET Core backend

bff-aspnetcore-angular's Issues

Create diagrams for dev and prod setup

Improve refresh SPA part when working with the dev proxy

"reactrefresh": {
        "ClusterId": "cluster1",
        "Match": {
          "Path": "@react-refresh"
        }
      },
      "vite": {
        "ClusterId": "cluster1",
        "Match": {
          "Path": "@vite/{**catch-all}"
        }
      },
      "sourcefiles": {
        "ClusterId": "cluster1",
        "Match": {
          "Path": "src/{**catch-all}"
        }
      },
      "nodemodules": {
        "ClusterId": "cluster1",
        "Match": {
          "Path": "node_modules/{**catch-all}"
        }
      },
      "yarncachedfiles": {
        "ClusterId": "cluster1",
        "Match": {
          "Path": ".yarn/{**catch-all}"
        }
      },
      "wellknown": {
        "ClusterId": "cluster1",
        "Match": {
          "Path": "well-known/{**catch-all}"
        }
      },
      "favicon": {
        "ClusterId": "cluster1",
        "Match": {
          "Path": "{**catch-all}"
          "Path": "favicon.ico"
        }
      }

awesome @rufer7 thanks, will adapt this for the Angular and Vue version

Add docs for server setup

Improve logout, use CSRF protection

Use bootstrap or material ui

Get user profile data

Create build

Update and improve CSP in dev and prod

Add docs about Azure key vault and user secrets

Add docs for Angular setup

Add docs about CSP setup and settings

Add tests and validation for server, client routes in development and production

Fix Graph downstream API on session timeout

Graph calls don't work after server restart or session timeout, add cache persistence or recovery for msal downstream APIS

Create IaC using terraform

Add login open redirect attack protection

https://github.com/damienbod/bff-aspnetcore-angular/blob/main/server/Controllers/AccountController.cs

Add URL protection to the login

Add anti-forgery token

UseNoUnauthorizedRedirect update error handling

Call API with cookie

Add Swagger and CSP setup for swagger

Add logging using serilog