List view

[Discussion] Single authentication scheme is treated as default scheme

announcementThis issue is an announcement about important functionality change (prevents auto-closing)This issue is an announcement about important functionality change (prevents auto-closing)

area-authIncludes: Authn, Authz, OAuth, OIDC, BearerIncludes: Authn, Authz, OAuth, OIDC, Bearer

Status: Open.

#42828 In dotnet/aspnetcore;

· captainsafia opened on Jul 20, 2022

Microsoft Security Advisory CVE-2023-33170: .NET Security Feature Bypass Vulnerability

announcementThis issue is an announcement about important functionality change (prevents auto-closing)This issue is an announcement about important functionality change (prevents auto-closing)

area-authIncludes: Authn, Authz, OAuth, OIDC, BearerIncludes: Authn, Authz, OAuth, OIDC, Bearer

Status: Open.

#49334 In dotnet/aspnetcore;

· rbhanda opened on Jul 11, 2023

Microsoft Security Advisory CVE-2023-35391: .NET Information Disclosure Vulnerability

announcementThis issue is an announcement about important functionality change (prevents auto-closing)This issue is an announcement about important functionality change (prevents auto-closing)

area-infrastructureIncludes: MSBuild projects/targets, build scripts, CI, Installers and shared frameworkIncludes: MSBuild projects/targets, build scripts, CI, Installers and shared framework

Security

Status: Open.

#49924 In dotnet/aspnetcore;

· rbhanda opened on Aug 8, 2023

Cannot provide a value for property 'AuthenticationService' on type 'Microsoft.AspNetCore.Components.WebAssembly.Authentication.RemoteAuthenticatorView'. There is no registered service of type 'Microsoft.AspNetCore.Components.WebAssembly.Authentication.IRemoteAuthenticationService`1[Microsoft.AspNetCore.Components.WebAssembly.Authentication.RemoteAuthenticationState

area-blazorIncludes: Blazor, Razor ComponentsIncludes: Blazor, Razor Components

Status: Open.

#51759 In dotnet/aspnetcore;

· dlgombert opened on Oct 30, 2023

Improvements to the Blazor website

area-blazorIncludes: Blazor, Razor ComponentsIncludes: Blazor, Razor Components

product-feedback

Status: Open.

#50752 In dotnet/aspnetcore;

· marinasundstrom opened on Sep 16, 2023

InteractiveAuto rendermode determined by from where the user was navigating

area-blazorIncludes: Blazor, Razor ComponentsIncludes: Blazor, Razor Components

Status: Open.

#52740 In dotnet/aspnetcore;

· ghost opened on Dec 11, 2023

Quickgrid with Virtualize=true not displaying the data.

area-blazorIncludes: Blazor, Razor ComponentsIncludes: Blazor, Razor Components

Status: Open.

#53872 In dotnet/aspnetcore;

· KurinchiA opened on Feb 7, 2024

Howto : .Net8 Authenticated (Azure) SignalR with Blazor Server

area-blazorIncludes: Blazor, Razor ComponentsIncludes: Blazor, Razor Components

Blazor ♥ SignalRThis issue is related to the experience of Signal R and Blazor working togetherThis issue is related to the experience of Signal R and Blazor working together

Status: Open.

#54134 In dotnet/aspnetcore;

· njannink opened on Feb 20, 2024

Pass an object as a parameter to a minimal API endpoint

area-minimalIncludes minimal APIs, endpoint filters, parameter binding, request delegate generator etcIncludes minimal APIs, endpoint filters, parameter binding, request delegate generator etc

Needs: Attention 👋This issue needs the attention of a contributor, typically because the OP has provided an update.This issue needs the attention of a contributor, typically because the OP has provided an update.

Status: Open.

#55184 In dotnet/aspnetcore;

· htmlsplash opened on Apr 17, 2024

Improve Error Message and/or Docs around InvariantGlobalization true by default

area-minimalIncludes minimal APIs, endpoint filters, parameter binding, request delegate generator etcIncludes minimal APIs, endpoint filters, parameter binding, request delegate generator etc

design-proposalThis issue represents a design proposal for a different issue, linked in the descriptionThis issue represents a design proposal for a different issue, linked in the description

NativeAOT

Status: Open.

#53678 In dotnet/aspnetcore;

· ardalis opened on Jan 28, 2024

Microsoft Security Advisory CVE-2024-21319: .NET Denial of Service Vulnerability

announcementThis issue is an announcement about important functionality change (prevents auto-closing)This issue is an announcement about important functionality change (prevents auto-closing)

Security

Status: Open.

#53246 In dotnet/aspnetcore;

· rbhanda opened on Jan 9, 2024

[Question] Is there a way to properly emulate InvalidModelStateResponseFactory in minimal apis?

area-minimalIncludes minimal APIs, endpoint filters, parameter binding, request delegate generator etcIncludes minimal APIs, endpoint filters, parameter binding, request delegate generator etc

Needs: Attention 👋This issue needs the attention of a contributor, typically because the OP has provided an update.This issue needs the attention of a contributor, typically because the OP has provided an update.

Status: Open.

#57337 In dotnet/aspnetcore;

· michaeltg17 opened on Aug 14, 2024

OpenApi Flags enum not handled correctly

area-minimalIncludes minimal APIs, endpoint filters, parameter binding, request delegate generator etcIncludes minimal APIs, endpoint filters, parameter binding, request delegate generator etc

area-mvcIncludes: MVC, Actions and Controllers, Localization, CORS, most templatesIncludes: MVC, Actions and Controllers, Localization, CORS, most templates

feature-openapi

Status: Open.

#57980 In dotnet/aspnetcore;

· dnv-kimbell opened on Sep 20, 2024

🚀 CI Improvements in dotnet/aspnetcore

announcementThis issue is an announcement about important functionality change (prevents auto-closing)This issue is an announcement about important functionality change (prevents auto-closing)

area-infrastructureIncludes: MSBuild projects/targets, build scripts, CI, Installers and shared frameworkIncludes: MSBuild projects/targets, build scripts, CI, Installers and shared framework

Status: Open.

#62911 In dotnet/aspnetcore;

· wtgodbe opened on Jul 24, 2025

<code>HttpClient.PostAsync</code> fails to reach controller endpoint during both Debug and Run sessions in integration tests.

area-mvcIncludes: MVC, Actions and Controllers, Localization, CORS, most templatesIncludes: MVC, Actions and Controllers, Localization, CORS, most templates

feature-mvc-testingMVC testing packageMVC testing package

Status: Open.

#61844 In dotnet/aspnetcore;

· khteh opened on May 9, 2025

[WebApplicationFactory] UseKestrel with SSL feedback

area-mvcIncludes: MVC, Actions and Controllers, Localization, CORS, most templatesIncludes: MVC, Actions and Controllers, Localization, CORS, most templates

feature-mvc-testingMVC testing packageMVC testing package

Status: Open.

#63012 In dotnet/aspnetcore;

· fschwiet opened on Jul 30, 2025

Reconsider Deprecating Extensions.ApiDescription.Client

area-commandlinetoolsIncludes: Command line tools, dotnet-dev-certs, dotnet-user-jwts, and OpenAPIIncludes: Command line tools, dotnet-dev-certs, dotnet-user-jwts, and OpenAPI

feature-openapi

Status: Open.

#62980 In dotnet/aspnetcore;

· TheXenocide opened on Jul 28, 2025

Microsoft.AspNetCore.OpenAPI duplicating schemas when returning generic wrappers and reusing model

area-minimalIncludes minimal APIs, endpoint filters, parameter binding, request delegate generator etcIncludes minimal APIs, endpoint filters, parameter binding, request delegate generator etc

feature-openapi

Status: Open.

#62508 In dotnet/aspnetcore;

· v-stewartp opened on Jun 30, 2025

Minimal API middleware order is confusing and unintuitive

area-minimalIncludes minimal APIs, endpoint filters, parameter binding, request delegate generator etcIncludes minimal APIs, endpoint filters, parameter binding, request delegate generator etc

Status: Open.

#63082 In dotnet/aspnetcore;

· jscarle opened on Aug 3, 2025