Add code to hide server information in response header

This commit is contained in:
ashutosh.nehete 2025-04-09 14:49:01 +05:30
parent 04d6c03b05
commit 4eb4f19e9c

View File

@ -142,9 +142,16 @@ builder.Services.AddAuthentication(options =>
}); });
builder.Services.AddSingleton(jwtSettings); builder.Services.AddSingleton(jwtSettings);
builder.WebHost.ConfigureKestrel(options =>
{
options.AddServerHeader = false; // Disable the "Server" header
});
var app = builder.Build(); var app = builder.Build();
app.UseMiddleware<ExceptionHandlingMiddleware>();
app.UseMiddleware<TenantMiddleware>();
app.UseMiddleware<LoggingMiddleware>();
@ -170,9 +177,7 @@ app.UseStaticFiles(); // Enables serving static files
app.UseHttpsRedirection(); app.UseHttpsRedirection();
app.UseMiddleware<ExceptionHandlingMiddleware>();
app.UseMiddleware<TenantMiddleware>();
app.UseMiddleware<LoggingMiddleware>();
app.UseAuthorization(); app.UseAuthorization();