From f488109a4ca8e787877a059cd68177bee95c35e8 Mon Sep 17 00:00:00 2001
From: "ashutosh.nehete" <ashutosh.nehete@marcoaiot.com>
Date: Wed, 9 Apr 2025 14:49:01 +0530
Subject: [PATCH] Add code to hide server information in response header

---
 Marco.Pms.Services/Program.cs | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/Marco.Pms.Services/Program.cs b/Marco.Pms.Services/Program.cs
index 6a40b75..33d5dc0 100644
--- a/Marco.Pms.Services/Program.cs
+++ b/Marco.Pms.Services/Program.cs
@@ -156,9 +156,16 @@ builder.Services.AddAuthentication(options =>
 });
 
 builder.Services.AddSingleton(jwtSettings);
+builder.WebHost.ConfigureKestrel(options =>
+{
+    options.AddServerHeader = false; // Disable the "Server" header
+});
 
 var app = builder.Build();
 
+app.UseMiddleware<ExceptionHandlingMiddleware>();
+app.UseMiddleware<TenantMiddleware>();
+app.UseMiddleware<LoggingMiddleware>();
 
 
 
@@ -186,9 +193,7 @@ app.UseStaticFiles(); // Enables serving static files
 
 
 app.UseHttpsRedirection();
-app.UseMiddleware<ExceptionHandlingMiddleware>();
-app.UseMiddleware<TenantMiddleware>();
-app.UseMiddleware<LoggingMiddleware>();
+
 
 
 app.UseAuthorization();