Base solution for your next web application
Open Closed

Autheticate methos save password in AuditLog #3617


User avatar
0
ivanosw1 created

Hi, The standard method Authenticate with AuthenticateModel is logged in AbpAuditLogs with a clear text password and this is not good.

I need to change the source code and use [DisableAuditing] attribute or I'm missing some setting ?

Thank you.


1 Answer(s)
  • User Avatar
    0
    ismcagdas created
    Support Team

    Hi,

    We have added it in the latest version, see <a class="postlink" href="https://github.com/aspnetzero/aspnet-zero-core/blob/master/aspnet-core/src/MyCompanyName.AbpZeroTemplate.Web.Core/Models/TokenAuth/AuthenticateModel.cs#L15">https://github.com/aspnetzero/aspnet-ze ... del.cs#L15</a>.

    You can also add it, it was our mistake.

    Thanks.