hi
Is it OK to disable the issuer validation on production?
I think it's ok.
https://github.com/abpframework/abp-samples/blob/master/DomainTenantResolver/OpenIddict/NG/angular/src/environments/environment.ts#L16
However, I now face an issue when trying to log in with the admin user to mydomain.com as a "superadmin". I end up in an infinite loop because the /connect/token endpoint responds with a 400 error:
{
"error": "invalid_grant",
"error_description": "The issuer associated to the specified token is not valid.",
"error_uri": "https://documentation.openiddict.com/errors/ID2088"
}
Can you share a access_token in this error?
hi
AddDevelopmentEncryptionCertificate
Please use a pfx certificate for the Production environment.
see https://docs.abp.io/en/abp/latest/Deployment/Configuring-OpenIddict#development-environment https://docs.abp.io/en/abp/latest/Deployment/Configuring-OpenIddict#production-environment
hi
The suite doesn't support bulk generating entities now
https://docs.abp.io/en/commercial/latest/abp-suite/generating-entities-from-an-existing-database-table.
hi
Its your project. Do you know how I can reproduce it locally?
hi
I can't get this error based on these codes. Can you share a simple project?
liming.ma@volosoft.com
https://wetransfer.com/
hi
Can you share some code to reproduce this?
Thanks
hi
The issuer is obtained by request.Scheme + Uri.SchemeDelimiter + host + request.PathBase if you don't call the SetIssuer method.
invalid issuer in discovery document expected
You could disable issuer validation using skipIssuerCheck.
https://manfredsteyer.github.io/angular-oauth2-oidc/docs/classes/AuthConfig.html#skipIssuerCheck
hi
You can add SixLabors packages to your projects that use Volo.Abp.Account.Pro.Public.Application/8.1.3
<PackageVersion Include="SixLabors.ImageSharp" Version="3.1.4" />
<PackageVersion Include="SixLabors.ImageSharp.Drawing" Version="2.0.1" />
hi
. Could you please upgrade this with latest stable version.
No problem. Thanks for your feedback
We have upgraded this package in 8.3
hi
What are error logs when builder.SetIssuer(new Uri(configuration["AuthServer:Authority"]!));?