Login error when upgrading to v8.0.0 #6425

7 Answer(s)

• 

  0

  maliming created 4 months ago

  Support Team Fullstack Developer

  hi

  You can try to use https instead of http.

  Chrome will block some cookies during http.

  Save Cancel
• 

  0

  duyan11110 created 4 months ago

  Hi,

  Changing to https is taking time, is there any way to use http. Everything's still OK before upgrading.

  Save Cancel
• 

  0

  maliming created 4 months ago

  Support Team Fullstack Developer

  hi

  I think you are using the identity server 4 right?

  https://community.abp.io/posts/patch-for-chrome-login-issue-identityserver4-samesite-cookie-problem-weypwp3n

  Save Cancel
• 

  -1

  duyan11110 created 4 months ago

  No, I am using OpenIdDict, but I already applied that solution and it worked fine before upgrading

  Save Cancel
• 

  0

  maliming created 4 months ago

  Support Team Fullstack Developer

  hi

  You better use https for all websites.

  But if you want to keep using http, you should apply AddSameSiteCookiePolicy to all your websites.

  also need to call DisableTransportSecurityRequirement of openiddict.

  https://support.abp.io/QA/Questions/3816/How-to-disable-https-in-openiddict#answer-0bea3600-1209-f831-3cbf-3a06f6fa86e0

  Save Cancel
• 

  0

  duyan11110 created 4 months ago

  But if you want to keep using http, you should apply AddSameSiteCookiePolicy to all your websites.

  I already applied this one for Web project, and I've just applied for AuthServer project, but still get the error:

  public override void ConfigureServices(ServiceConfigurationContext context)
  {
      var hostingEnvironment = context.Services.GetHostingEnvironment();
      var configuration = context.Services.GetConfiguration();
  
      if (!Convert.ToBoolean(configuration["App:DisablePII"]))
      {
          Microsoft.IdentityModel.Logging.IdentityModelEventSource.ShowPII = true;
      }
      
      if (!Convert.ToBoolean(configuration["AuthServer:RequireHttpsMetadata"]))//false in appsettings.json
      {
          Configure<OpenIddictServerAspNetCoreOptions>(options =>
          {
              options.DisableTransportSecurityRequirement = true;// Already had from old version
          }); 
      }
  
      context.Services.AddSameSiteCookiePolicy(); // just added this line
      ...
    }
  

  And as I said above, everything's still OK before upgrading

  Save Cancel
• 

  0

  maliming created 4 months ago

  Support Team Fullstack Developer

  hi

  This is the browser's behavior, which has nothing to do with the abp version. The browser will block cookies that it thinks are unsafe.

  You can see the warning message in the browser console.

  I suggest you change the website to https. It won't take much time, but this is the best way to solve this problem.

  Save Cancel