Upgrading Volo.Abp.Http.Client 7 to 8
Breaking7.4.5 → 8.3.4Breaking16Security5Deprecated3New169Changed280Fixed207Other470
BreakingUpgrade verdict
16 breaking changes and 5 security fixes.
In plain terms
- Removes the OnDisconnectedAsync method from AbpAuthenticationHubFilter.
- A built-in handler that added dynamic claims to OpenIddict principal is removed.
- Removes an old, obsolete exception serialization constructor.
- Code that reads the flag icon from language info will no longer compile or work.
Must act Top 5 of 24 that need code or config changes
Target frameworks requirement changed in 8.0.0-rc.1: .NETStandard2.0, .NETStandard2.1, net7.0 → .NETStandard2.0, .NETStandard2.1, net8.0.
What you must change
Breaking16
Removes the OnDisconnectedAsync method from AbpAuthenticationHubFilter.
AbpAuthenticationHubFilterOnDisconnectedAsyncRemoves
AbpDynamicClaimsOpenIddictClaimsPrincipalHandler.AbpDynamicClaimsOpenIddictClaimsPrincipalHandlerRemoves the obsolete legacy serialization feature
Exception.Exception(SerializationInfo, StreamingContext).Exception.Exception(SerializationInfo, StreamingContext)SerializationInfoStreamingContextRemoves the flag-icon property from ILanguageInfo.
ILanguageInfoRemoves the Nito.AsyncEx.Coordination package from Volo.Abp.Core.
Volo.Abp.CoreNito.AsyncEx.CoordinationRemoves the 'HostWithIds' symbol from the CLI.
HostWithIdsRemoves MethodPlaceholder.
MethodPlaceholderRemoves RemoveUnnecessaryDbMigratorClients.
RemoveUnnecessaryDbMigratorClientsRemoves backward compatible CMS Kit page URLs.
Removes the IJsonSerializer from RemoteDynamicClaimsPrincipalContributorCache.
IJsonSerializerRemoteDynamicClaimsPrincipalContributorCacheRemoves IAbpClaimsPrincipalFactory from AbpComponentsClaimsCache.
IAbpClaimsPrincipalFactoryAbpComponentsClaimsCacheRemoves AppTemplateRemoveMongodbCollectionFixtureStep.
AppTemplateRemoveMongodbCollectionFixtureStepChanges namespace of
AbpAspNetCoreComponentsWebOptions.AbpAspNetCoreComponentsWebOptionsMakes IsRedirectAllowedUrlAsync of IAppUrlProvider async.
IsRedirectAllowedUrlAsyncIAppUrlProviderReplaces IdentityUserLookupAppService with an integration service.
IdentityUserLookupAppServiceMakes IAbpDaprClientFactory async.
IAbpDaprClientFactorySecurity5
Updates the ImageSharp package due to vulnerabilities.
ImageSharpLocks the user account after too many incorrect 2FA code attempts.
Updates vulnerable NPM packages to the latest version.
Updates packages to address vulnerabilities.
Enhances CmsKit PreventXSS protection.
PreventXSSDeprecations to plan for
Deprecated3
Replaces the deprecated forRoot method with new provider functions in documentation.
forRootCreates function guards and marks class guards as deprecated.
Deprecates the abp-Password component in favor of a directive.
abp-Password