We use .NET 8 currently and what I've encountered is a bit annoying and interesting topic at the same time and I would need some advice on how to do it right. Our application can download log files and we do this by following the guideline from MS: https://learn.microsoft.com/en-us/aspnet/core/blazor/file-downloads?view=aspnetcore-8.0#download-from-a-stream .

However when it comes to larger log files -which we unfortunately have- then this does not work and that's why I followed their further step/solution at this section: https://learn.microsoft.com/en-us/aspnet/core/blazor/file-downloads?view=aspnetcore-8.0#download-from-a-url

So the download process via. URL works, however our Azure Application Gateway does block such requests since it might expose our logs, which is bad.

My question would be if there es a different approach to this problem or do I put some authentication for downloading inside the URL...? I thought the wwwroot folder in my application was a 'safe space' so to say but it got blocked anyway. Did you forgot/oversaw smt there?

Thanks!