Open Closed

Upgrading from IdentityServer to OpenIdDict issues #6511

User avatar
0
Dina created
  • ABP Framework version: v7.4.2
  • UI Type: MVC(SQL)

Hi,

After we upgraded from IdentityServer to OpenIdDict there were some issues

We have an Admin application (which is working fine) and Clinic application which has an issue while redirecting to the application dashboard after signing in using OpenId

Please advise ASAP.

Go to accepted answer
46 Answer(s)
  • User Avatar
    0
    gterdem created
    Support Team Senior .NET Developer

    Please share the related logs of your

    • Application
    • AuthServer
  • User Avatar
    0
    Dina created

    kindly check.

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    hi

    The authserver says: The specified access token is bound to an account that no longer exists.

    Does your account belong to a tenant?

    Can you share the code of AuthServer module?

  • User Avatar
    0
    Dina created

    yes, the account is related to a tenant.

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    hi

    Please adjust the order of your middleware based on https://github.com/abpframework/abp/blob/dev/templates/module/aspnet-core/host/MyCompanyName.MyProjectName.AuthServer/MyProjectNameAuthServerModule.cs#L211-L233

  • User Avatar
    0
    Dina created

    also there is an issue at the Public application

  • User Avatar
    0
    Dina created

    hi

    Please adjust the order of your middleware based on https://github.com/abpframework/abp/blob/dev/templates/module/aspnet-core/host/MyCompanyName.MyProjectName.AuthServer/MyProjectNameAuthServerModule.cs#L211-L233

    is this correct?

      public override void OnApplicationInitialization(ApplicationInitializationContext context)
        {
            var app = context.GetApplicationBuilder();
            var env = context.GetEnvironment();

            if (env.IsDevelopment())
            {
                app.UseDeveloperExceptionPage();
            }

            if (!env.IsDevelopment())
            {
                app.UseErrorPage();
            }

            app.UseHttpsRedirection();
           app.UseCorrelationId();
            app.UseStaticFiles();
            app.UseRouting();
            app.UseCors();
            app.UseAuthentication();
            app.UseAbpOpenIddictValidation();

            if (MultiTenancyConsts.IsEnabled)
            {
                app.UseMultiTenancy();
            }

           
            //app.UseJwtTokenMiddleware();
            app.UseAbpRequestLocalization(options =>
            {
                options.RequestCultureProviders.RemoveAll(x => x.GetType() == typeof(AcceptLanguageHeaderRequestCultureProvider));
                options.SetDefaultCulture("en-US");
            });

            app.UseAuditing();
            app.UseAbpSerilogEnrichers();
            app.UseConfiguredEndpoints();


            app.UseUnitOfWork();
            //app.UseIdentityServer();

            app.UseAuthorization();

            app.UseMiddleware<RedirectClientMiddleware>();            
            
        }
  • User Avatar
    0
    Dina created

    same issue

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    hi

    What are the logs of the AuthServer project?

  • User Avatar
    0
    Dina created

    hi

    What are the logs of the AuthServer project?

    with the tenant issue

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    hi

    ** If there are calls to app.UseRouting() and app.UseEndpoints(...), the call to app.UseAuthorization() must go between them.**

    is this correct?

    No. Please check https://github.com/abpframework/abp/blob/dev/templates/module/aspnet-core/host/MyCompanyName.MyProjectName.AuthServer/MyProjectNameAuthServerModule.cs#L211-L233

  • User Avatar
    0
    Dina created 
      public override void OnApplicationInitialization(ApplicationInitializationContext context)
    {
        var app = context.GetApplicationBuilder();
        var env = context.GetEnvironment();

        if (env.IsDevelopment())
        {
            app.UseDeveloperExceptionPage();
        }

        if (!env.IsDevelopment())
        {
            app.UseErrorPage();
        }

        app.UseHttpsRedirection();
        app.UseCorrelationId();
        app.UseStaticFiles();
        app.UseRouting();
        app.UseCors();
        app.UseAuthentication();
        

        app.UseAbpOpenIddictValidation();

        if (MultiTenancyConsts.IsEnabled)
        {
            app.UseMultiTenancy();
        }

       
        //app.UseJwtTokenMiddleware();
        app.UseAbpRequestLocalization(options =>
        {
            options.RequestCultureProviders.RemoveAll(x => x.GetType() == typeof(AcceptLanguageHeaderRequestCultureProvider));
            options.SetDefaultCulture("en-US");
        });

        app.UseAuthorization();

        app.UseAuditing();
        app.UseAbpSerilogEnrichers();
        app.UseConfiguredEndpoints();


        app.UseUnitOfWork();
        //app.UseIdentityServer();

        

        app.UseMiddleware&lt;RedirectClientMiddleware&gt;();            
        
    }
  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    hi

    Your code is different from our template.

    https://github.com/abpframework/abp/blob/dev/templates/module/aspnet-core/host/MyCompanyName.MyProjectName.AuthServer/MyProjectNameAuthServerModule.cs#L211-L233

    https://github.com/abpframework/abp/blob/dev/templates/app/aspnet-core/src/MyCompanyName.MyProjectName.AuthServer/MyProjectNameAuthServerModule.cs#L191-L226

    The UseConfiguredEndpoints have to be the last middleware.

  • User Avatar
    0
    Dina created

    and what about this line order?

    app.UseMiddleware<RedirectClientMiddleware>();

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    What is the code of RedirectClientMiddleware?

    If it will control the HTTP request it must be before UseConfiguredEndpoints

  • User Avatar
    0
    Dina created

    i have reordered them

    but issue still exists

    2024-01-17 15:33:34.395 +02:00 [INF] CORS policy execution failed.
2024-01-17 15:33:34.411 +02:00 [INF] Request origin https://localhost:44394 does not have permission to access the resource.
2024-01-17 15:33:34.436 +02:00 [DBG] The event OpenIddict.Validation.OpenIddictValidationEvents+ProcessRequestContext was successfully processed by OpenIddict.Validation.AspNetCore.OpenIddictValidationAspNetCoreHandlers+ResolveRequestUri.
  • User Avatar
    0
    Dina created

    2024-01-17 15:35:34.908 +02:00 [ERR] Exception occurred while processing message. System.Net.Http.HttpRequestException: Response status code does not indicate success: 401 (Unauthorized). at System.Net.Http.HttpResponseMessage.EnsureSuccessStatusCode() at Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectHandler.GetUserInformationAsync(OpenIdConnectMessage message, JwtSecurityToken jwt, ClaimsPrincipal principal, AuthenticationProperties properties) at Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectHandler.HandleRemoteAuthenticateAsync() 2024-01-17 15:35:34.941 +02:00 [INF] Error from RemoteAuthentication: Response status code does not indicate success: 401 (Unauthorized).. 2024-01-17 15:35:34.961 +02:00 [ERR] An unhandled exception has occurred while executing the request. System.Exception: An error was encountered while handling the remote login. ---> System.Net.Http.HttpRequestException: Response status code does not indicate success: 401 (Unauthorized). at System.Net.Http.HttpResponseMessage.EnsureSuccessStatusCode() at Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectHandler.GetUserInformationAsync(OpenIdConnectMessage message, JwtSecurityToken jwt, ClaimsPrincipal principal, AuthenticationProperties properties) at Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectHandler.HandleRemoteAuthenticateAsync() --- End of inner exception stack trace --- at Microsoft.AspNetCore.Authentication.RemoteAuthenticationHandler`1.HandleRequestAsync() at Microsoft.AspNetCore.Authentication.AuthenticationMiddleware.Invoke(HttpContext context) at Microsoft.AspNetCore.Diagnostics.DeveloperExceptionPageMiddlewareImpl.Invoke(HttpContext context)

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    hi

    Please try a host user. I think your multi-tenant middleware is not working correctly.

    What is the content of your authserver module code now?

  • User Avatar
    0
    Dina created

    the host user does not have permission for the tenant, the tenant user login normally, but the issue is while redirecting to tenant dashboard

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    hi

    Please share a simple project to reproduce liming.ma@volosoft.com

    Thanks

  • User Avatar
    0
    Dina created

    and this this for tenant

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    https://support.abp.io/QA/Questions/6511/Upgrading-from-IdentityServer-to-OpenIdDict-issues#answer-3a102d5b-cd53-0e52-33f1-dc93f1ca8c88

  • User Avatar
    0
    Dina created

    https://support.abp.io/QA/Questions/6511/Upgrading-from-IdentityServer-to-OpenIdDict-issues#answer-3a102d5b-cd53-0e52-33f1-dc93f1ca8c88

    it is difficult for me to create another simple one as the project is big and has a lot of modules, projects and configurations!!

    Please let me know what classes or configurations should i check due to the sent logs.

  • User Avatar
    0
    Dina created

    also there is an issue at the Public application

    also, there is a similar issue with the public application as mentioned above.

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    hi

    Please share full code of Maw3idIdentityServerModule to liming.ma@volosoft.com

Assignee
User avatar maliming
Labels
Non yet
Made with ❤️ on ABP v8.2.0-preview Updated on March 25, 2024, 15:11