ABP Framework version: v4.3.1 DB provider: SQL Server Tiered (MVC) or Identity Server Separated : yes Exception message and stack trace:
I am giving fixed IssuerUri address in IdentityServer application module.
Configure<IdentityServerOptions>(options => { options.IssuerUri = configuration["App:SelfUrl"]; });
IdentityServer and my other applications revolve Tenant via sub-domain.
However, although I have given the Identity Server Issuer Uri as a constant, it varies according to the domain.
How can i solve this problem. Application sample link I referenced: https://github.com/abpframework/abp-samples/tree/master/DomainTenantResolver/MVC-TIERED
6 Answer(s)
-
0
See https://github.com/abpframework/abp-samples/blob/abd1a864f273523640853362581c65cb85f5ac5b/DomainTenantResolver/MVC-TIERED/src/Acme.BookStore.Web/BookStoreWebModule.cs#L162
-
0
Hi,
AuthServerModule:
Configure<AbpTenantResolveOptions>(options => { options.AddDomainTenantResolver(configuration["App:TenantDomainFormat"]); //{0}.mydomain.com });Configure<IdentityServerOptions>(options => { options.IssuerUri = configuration["App:SelfUrl"]; //mydomain.com });I define the IssuerUri as mydomain.com. However, when logged in as turkey.mydomain.com, the issuer changes to turkey.mydomain.com in the .well-known/openid-configuration information.
My problem is on the IdentityServer App (AuthServer) side.
It is already defined in the web client application as you have forwarded in the link.
-
0
I can't get your point, you want the IssuerUri to change with the tenant, right?
-
0
Actually no.
I want IssuerUri to be constant on IdentityServer side. It shouldn't change by domain. Micro-services cannot validate IssuerUri when IssuerUri varies by domain. For this, I close as follows, but I do not want it.
options.TokenValidationParameters = new Microsoft.IdentityModel.Tokens.TokenValidationParameters { ValidateIssuer = false };I add the following to fix IssuerUri in IdentityServer section. But it's not working.
Configure<IdentityServerOptions>(options => { options.IssuerUri = "mydomain.app"; }); -
0
hi
Can you get the
IdentityServerOptionsfrom the DI and check theIssuerUri?var options = context.RequestServices.GetRequiredService<IdentityServerOptions>(); var uri = options.IssuerUri; -
0
This question has been automatically marked as stale because it has not had recent activity.
