Question Allow DLLs in Web App Firewall

[Emailme@briantheitguy]

Server operating system version

Windows Server 2022 Standard

Plesk version and microupdate number

Plesk Obsidian Web Host Edition 18.0.58 Update #2

I have deployed a Blazor WASM and all DLLs are getting a 403 as soon as you hit the site. How do I allow them?

 

[Kaspar@Plesk]

Have a look at your domain logs to see which exact WAF rule is triggered and causes the 403 errors. You can then disabled that specific rule.

More information can be read here: https://support.plesk.com/hc/en-us/...plication-Firewall-ModSecurity-rules-in-Plesk

 

[Emailme@briantheitguy]

Ok, thx.. but where are the domain logs to see which exact WAF rule is triggered? :/

 

[Emailme@briantheitguy]

I see the 403s... but nothing indicating the rule.

 

[Emailme@briantheitguy]

Can i just allow all "_framework/" files? .. if so then how?

 

[Emailme@briantheitguy]

I found it!.. I disabled rule ID 920440 ... Is that ok?

 

[Kaspar@Plesk]

I found it!.. I disabled rule ID 920440 ... Is that ok?

From what I can gather CRS rule 920440 blocks a variety of file extensions. Does disabling the rule solve your issue?

 

[Emailme@briantheitguy]

From what I can gather CRS rule 920440 blocks a variety of file extensions. Does disabling the rule solve your issue?

Yes, it resolved the active issue at the time. I am now fighting other issues related to deploying my blazor WASM project.

Now, my issue is this: "
These requirements were not met:
DenyAnonymousAuthorizationRequirement: Requires an authenticated user."

How do I allow that? It works when I run it locally.

 

[Kaspar@Plesk]

Yes, it resolved the active issue at the time. I am now fighting other issues related to deploying my blazor WASM project.

Now, my issue is this: "
These requirements were not met:
DenyAnonymousAuthorizationRequirement: Requires an authenticated user."

How do I allow that? It works when I run it locally.

The "DenyAnonymousAuthorizationRequirement: Requires an authenticated user." warning seems specific to blazor.

I found these sites/threads with similar issues. Maybe any of the suggestions there help you to:

ASP.NET Core 7 Web API - authorization failed. These requirements were not met: DenyAnonymousAuthorizationRequirement: Requires an authenticated user

Startup.cs: services.AddAuthentication(options => { options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme; options.DefaultChallengeScheme = JwtBearerDefa...

stackoverflow.com

https://www.reddit.com/r/Blazor/comments/19782iq/how_to_handle