How do I generate the Auth url that will allow a non ABP related website authenticate with ABP OpenIddict? #5493

7 Answer(s)

• 

  0

  maliming created 9 months ago

  Support Team Fullstack Developer

  hi

  You can add an OpenIdConnect and Cookies authentication schemes to your separate site

  Then everything will work as Public website

  context.Services.AddAuthentication(options =>
  {
      options.DefaultScheme = "Cookies";
      options.DefaultChallengeScheme = "oidc";
  })
  .AddCookie("Cookies", options =>
  {
      options.ExpireTimeSpan = TimeSpan.FromDays(365);
      options.CheckTokenExpiration();
  })
  .AddAbpOpenIdConnect("oidc", options =>
  {
      options.Authority = configuration["AuthServer:Authority"];
      options.RequireHttpsMetadata = Convert.ToBoolean(configuration["AuthServer:RequireHttpsMetadata"]); ;
      options.ResponseType = OpenIdConnectResponseType.CodeIdToken;
  
      options.ClientId = configuration["AuthServer:ClientId"];
      options.ClientSecret = configuration["AuthServer:ClientSecret"];
  
      options.UsePkce = true;
      options.SaveTokens = true;
      options.GetClaimsFromUserInfoEndpoint = true;
  
      options.Scope.Add("roles");
      options.Scope.Add("email");
      options.Scope.Add("phone");
      options.Scope.Add("MyProjectName");
  });
  

  Save Cancel
• 

  0

  okains created 9 months ago

  Hi,

  The question is based around handling this outside of a .NET environment.

  How can I best handle this outside of a .NET environment?

  So for example, I have a simple single page site, www.mysite.com with a LOGIN button on the homepage. I need to be able to generate the fully formed URL to the Auth server (ABP OpenIddict) that contains the redirectUri to then call back to www.mysite.com/callback so that I can access a JWT.

  So I need a way to generate this URL ( as noted in the original question ):

  https://localhost:44396/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%3Fclient_id%3DABP73Public_Web_Public%26redirect_uri%3Dhttps%253A%252F%252Flocalhost%3A7136%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520roles%2520email%2520phone%2520ABP73Public%26response_mode%3Dform_post%26nonce%3D638261167785072016.ZDg1NjgyZWUtZTAwNi00OGI4LTk0OTktNTZiNzVhOWIxOGFhMzk3YWM5N2UtODAwZC00YTc5LWI1MDMtNTA3OGNlNDk0MTEw%26state%3DCfDJ8MMdCuDzYEhJvMFQjtHhQGyHQ7Qq5BRX2jGkRv3Pti2RLsO3Zc0hq9QnyTqRr02P1_4NXt931DyfZ7gzkMJRP7UBUQNETvBJcwNqV3g2YbD2aOWRwEnF-gzhcrwrubi6mhAbGxqd6ZcTgmD9ndYyqCU2tW_ekfuuYY1cxmxMeeDF9CauhfMREVk0tCHTPcovRb8foC_mvAqRIvB-FSNjf-MLqwbtHeOltgqXecSXXH9K9gHrkWIe-dP2lQaq3pbrBqvU6BPCC8hd4Czj034Css0dT7AedrLKTmcde7Y47OdO%26x-client-SKU%3DID_NET6_0%26x-client-ver%3D6.21.0.0

  Thanks,

  Karim

  Save Cancel
• 

  0

  maliming created 9 months ago

  Support Team Fullstack Developer

  hi

  outside of a .NET environment?

  What kind of application?

  HTML + Javascript? PHP? Java?

  Using the oauth2 class library would be best instead of processing it manually. This process is more complicated.

  Save Cancel
• 

  0

  okains created 9 months ago

  HTML + Javascript for now, but I want to be able to have any 3rd party site / app that we have authenticate using ABP auth.

  So if you could explain how best to generate that URL and if there are any particular considerations I need to be aware of given the ABP implementation that would be great.

  Save Cancel
• 

  0

  maliming created 9 months ago

  Support Team Fullstack Developer

  hi

  You can use the javascript library like https://github.com/IdentityModel/oidc-client-js/wiki

  So if you could explain how best to generate that URL and if there are any particular considerations I need to be aware of given the ABP implementation that would be great.

  Abp uses standard oauth flow. https://auth0.com/docs/get-started/authentication-and-authorization-flow/authorization-code-flow

  Save Cancel
• 

  0

  okains created 9 months ago

  hi

  You can add an OpenIdConnect and Cookies authentication schemes to your separate site

  Then everything will work as Public website

  context.Services.AddAuthentication(options => 
  { 
      options.DefaultScheme = "Cookies"; 
      options.DefaultChallengeScheme = "oidc"; 
  }) 
  .AddCookie("Cookies", options => 
  { 
      options.ExpireTimeSpan = TimeSpan.FromDays(365); 
      options.CheckTokenExpiration(); 
  }) 
  .AddAbpOpenIdConnect("oidc", options => 
  { 
      options.Authority = configuration["AuthServer:Authority"]; 
      options.RequireHttpsMetadata = Convert.ToBoolean(configuration["AuthServer:RequireHttpsMetadata"]); ; 
      options.ResponseType = OpenIdConnectResponseType.CodeIdToken; 
   
      options.ClientId = configuration["AuthServer:ClientId"]; 
      options.ClientSecret = configuration["AuthServer:ClientSecret"]; 
   
      options.UsePkce = true; 
      options.SaveTokens = true; 
      options.GetClaimsFromUserInfoEndpoint = true; 
   
      options.Scope.Add("roles"); 
      options.Scope.Add("email"); 
      options.Scope.Add("phone"); 
      options.Scope.Add("MyProjectName"); 
  }); 
  

  OK then, to keep things clear, let's go back to this scenario with a separate .NET application. What code to I need to call / use in order to generate the correct URL as mentioned in the initial question?

  Save Cancel
• 

  0

  maliming created 9 months ago

  Support Team Fullstack Developer

  You can call the Challenge to initial the oidc flow.

  [HttpGet]
  public virtual async Task<ActionResult> Challenge(string returnUrl = "")
  {
      return Challenge(new AuthenticationProperties { RedirectUri = returnUrl }, "oidc");
  }
  

  https://learn.microsoft.com/en-us/dotnet/api/microsoft.aspnetcore.mvc.controllerbase.challenge?view=aspnetcore-7.0

  Save Cancel