Web Development

namespace Falcon.API.Controllers
{
    [Route("api/user")]
    [ApiController]
    public class UserController : _ControllerBase
    {
        public UserController(IConfiguration configuration) :
            base(configuration)
        {
        }

        [HttpGet("getById/{id}")]
        public IActionResult GetById(int id)
        {
            try
            {
                var repo = new Repository(GetDataContext());

                var owner = repo.GetById(id);

                if (owner is null)
                {
                    return NotFound();
                }
                else
                {
                    return Ok(owner);
                }
            }
            catch (Exception ex)
            {
                return StatusCode(500, "Internal server error");
            }
        }

        [HttpGet]
        public IActionResult GetAll()
        {
            try
            {
                var repo = new Repository(GetDataContext());

                var owners = repo.GetAll();

                return Ok(owners);
            }
            catch (Exception ex)
            {
                return StatusCode(500, "Internal server error");
            }
        }

        [HttpGet("login/{username}/{password}")]
        public IActionResult Login(string userName, string password)
        {
            try
            {
                var repo = new UserRepository(GetDataContext());

                var owner = repo.Login(userName, password);

                if (owner is null)
                {
                    return NotFound();
                }
                else
                {
                    return Ok(owner);
                }
            }
            catch (Exception ex)
            {
                return StatusCode(500, "Internal server error");
            }
        }
    }
}

public async Task Login(string userName, string password)
{
    UserEntity results = null;

    var url = $"https:// localhost:5001/api/User/Login/{userName}/{password}";

    using (var httpClient = new HttpClient())
    {
        using (var response = await httpClient.GetAsync(url))
        {
            string apiResponse = await response.Content.ReadAsStringAsync();
            results = JsonConvert.DeserializeObject(apiResponse);
        }
    }

    return results;
}

https: //localhost:5001/api/User

https: //localhost:5001/api/User/GetById/1

https: //localhost:5001/api/User/Login/jsmith/mypass

window.coreExternal {
  setCommissionStartDate,
  setCommissionStopDate, and so forth

$nonce = base64_encode(random_bytes(16));
header("Content-Security-Policy: default-src 'self' *.fontawesome.com; script-src 'self' 'unsafe-inline' /pcad/assets/scripts/core/ https://kit.fontawesome.com/ 'nonce-".$nonce."' 'sha256-...'; style-src 'self'; img-src 'self' data:;");

1. Do I need the access-control headers?
2. Did I paint myself into a corner using modules the way I did?
3. Is one policy canceling another policy?

Quote:

Content-Security-Policy: The page’s settings blocked the loading of a resource at inline (“style-src”).
Source: --bs-breadcrumb-divider: '>'; viewVendors.phtml

Quote:

Content-Security-Policy: The page’s settings blocked the loading of a resource at inline (“style-src”).
Source: width: 100%; border: none; viewVendors.phtml

header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0");
header("Pragma: no-cache");
header("Strict-Transport-Security: max-age=31536000; includeSubDomains; preload");
header("X-Content-Type-Options: nosniff");
header("X-Frame-Options: DENY");
header("X-XSS-Protection: 1; mode=block");
header('Referrer-Policy: same-origin');

header("Access-Control-Allow-Origin: self");   // Replace * with the actual origin(s) you want to allow
header("Access-Control-Allow-Methods: GET, POST, OPTIONS");
header("Access-Control-Allow-Headers: Content-Type");
header("Access-Control-Expose-Headers: *");

// Best Version that works - 01/24/2024 jKirkerx - Warning: Content-Security-Policy: The page’s settings blocked the loading of a resource at https://kit.fontawesome.com/ea5e36f877.js ("script-src").
header("Content-Security-Policy: default-src 'self' *.fontawesome.com; script-src 'self' 'unsafe-inline' /pcad/assets/scripts/core/ https://kit.fontawesome.com/ 'nonce-".$nonce."' 'sha256-...'; style-src 'self'; img-src 'self' data:;");

const dude = {
  name: 'dude',
  namedFunc() {
    console.log('name 1: ', this.name); // Dude

    setTimeout(function() {
      console.log('this 1:', this);
      console.log('name 2:', this.name); // undefined
    }, 200);
  },
  arrowFunc() {
    // temos scope tb...
    console.log('name 3:', this.name); // Dude

    setTimeout(() => {
      console.log('this 2:', this); // {name: 'dude', nameWNamed: ƒ, nameWArrow: ƒ}
      console.log('name 4:', this.name); // Dude
    }, 300)
  }
}

console.log('namedFunc:', dude.namedFunc());
console.log('arrowFunc:', dude.arrowFunc());

this 1: {name: 'dude', namedFunc: ƒ, arrowFunc: ƒ}
name 2: dude
this 2: Window {window: Window, self: Window, document: document, name: '', location: Location, …}
name 4: 

this 1: Window {window: Window, self: Window, document: document, name: '', location: Location, …}
name 2: 
this 2: {name: 'dude', namedFunc: ƒ, arrowFunc: ƒ}
name 4: dude