determine current tenant by subdomain on microservice demo #209

12 Answer(s)

• 

  0

  liangshiwei created 4 years ago

  Support Team Fullstack Developer

  Hi,

  If you want to resolve tenants from subdomain first,You can add DomainTenantResolveContributor as the first priority, like this:

  Configure<AbpTenantResolveOptions>(option =>
  {
      option.TenantResolvers.AddFirst(new DomainTenantResolveContributor("{0}.mydomain.com"));
  });
  

  Save Cancel
• 

  0

  gaoyao created 4 years ago

  If I put it in AuthServer.Host project. It can get submain. It is not tenant what I want, But It's in redirect_url. it is hard to format.

  What I want the tenant in the BackendAdminApp.Host‘S URL。IF I put it in BackendAdminApp.Host, It does not work. I may change grand type like Password. but I also have no idea

  Save Cancel
• 

  0

  liangshiwei created 4 years ago

  Support Team Fullstack Developer

  Hi,

  The auth server will call back to your website and set cookie, BackendAdminApp.Host can determine the current tenant from the cookie.

  Save Cancel
• 

  0

  gaoyao created 4 years ago

  The auth server "/Account/Login" Page ,then Need Click Change Tenant modal button, The tenant name needs to be re-entered manually.and set cookie. call back to your website.yes, It is OK

  but BackendAdminApp MVC WebSite URL likes "{0}.mydomain.com" Contains tenant. I don't want to re-enter tenant.

  Save Cancel
• 

  0

  liangshiwei created 4 years ago

  Support Team Fullstack Developer

  I will check it out.

  Save Cancel
• 

  0

  liangshiwei created 4 years ago

  Support Team Fullstack Developer

  Hi,

  This seems to be a browser limitation,for 302 redirect, when the browser sends the request again, the host in the request header is not the current website. So, can't use subdomain determine current tenant.

  We can add the current tenant to the querystring when redirecting, like this:

  context.Services.AddAuthentication(options =>
  {
      options.DefaultScheme = "Cookies";
      options.DefaultChallengeScheme = "oidc";
  })
  .AddCookie("Cookies", options =>
  {
      options.ExpireTimeSpan = TimeSpan.FromDays(365);
  })
  .AddOpenIdConnect("oidc", options =>
  {
      options.Authority = configuration["AuthServer:Authority"];
      options.ClientId = configuration["AuthServer:ClientId"];
      options.ClientSecret = configuration["AuthServer:ClientSecret"];
      options.RequireHttpsMetadata = false;
      options.ResponseType = OpenIdConnectResponseType.CodeIdToken;
      options.SaveTokens = true;
      options.GetClaimsFromUserInfoEndpoint = true;
      options.Scope.Add("role");
      options.Scope.Add("email");
      options.Scope.Add("phone");
      options.Scope.Add("BackendAdminAppGateway");
      options.Scope.Add("IdentityService");
      options.Scope.Add("ProductService");
      options.Scope.Add("TenantManagementService");
      options.ClaimActions.MapAbpClaimTypes();
  
      // Add the following code
      options.Events.OnRedirectToIdentityProvider = redirectContext =>
      {
          var currentTenant = redirectContext.HttpContext.RequestServices.GetService<ICurrentTenant>();    
          if (currentTenant.Id.HasValue)
          {
              var multiTenancyOptions = redirectContext.HttpContext.RequestServices.GetService<IOptions<AbpAspNetCoreMultiTenancyOptions>>().Value;
              redirectContext.ProtocolMessage.IssuerAddress += $"?{multiTenancyOptions.TenantKey}="+currentTenant.Id.Value;
          }
          return Task.CompletedTask;
      };
  });
  

  Save Cancel
• 

  0

  gaoyao created 4 years ago

  Thanks, it might be another way. redirecting to auth server,the url querystring contain __tenant. But It doesn't work，But I refresh the browser page, The tenant box can be displayed normally.

  At first, it seems that the querystring does not work, but after refreshing, the cookies are written and work. I changed the domain name of other tenants, and it is still the previous one unless I refresh again。Can be optimized again without refreshing？ refresh after

  the redirect url https://auth.***.***/Account/Login?ReturnUrl=/connect/authorize/callback?**__tenant=cee65354-71d7-9773-a293-39f5672d1da0**&client_id=backend-admin-app-client&redirect_uri=https%3A%2F%2Fgree.****.****%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20role%20email%20phone%20BackendAdminAppGateway%20BloggingService&response_mode=form_post&nonce=637266918513104558.NzgxYTUxZjQtMWI3Mi00ZTA5LTg1NmUtMGIxZDc5YjllNTYyZDA0ODk2YWQtZTdhMC00YWUzLTk2OWMtNTYxMjE0YWEwYTAy&state=CfDJ8FBiEkjnLbtOocsDyjId0EpHNi_2bYFwLl7Zjlzb5sYzSaRdF1Y6LkqI9qcGBCryDbyMRGNnIoPvBB-5lk1QsMQ0tRpCyfpDmZMv6oCgUwt0NvD23pQTk0qo1U7kb0aTvI89gev410x2gRKS7Jd56tpyeb9d6DvEJ3EGwYkqG0hpMUwhd0bTFsO1JntHcY5zXt1fzlxU13MxBcgo93HHmdDBb5i3HAeA-dBvN3F_22HXlMOUAmbx-OaJ1qlEMbq0I2aLI3aTuTXpa58fqT6Tdp_wBmvCYU9cyV5FsCJrI5ztNJCREcX93O1T1CrEjzio9A&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=5.5.0.0

  Save Cancel
• 

  0

  liangshiwei created 4 years ago

  Support Team Fullstack Developer

  Hi,

  I can't reproduce this problem,no need to refresh again. You need to remove the DomainTenantResolveContributor in authserver.

  Save Cancel
• 

  0

  gaoyao created 4 years ago

  I did not add DomainTenantResolveContributor in authserver In priority, CurrentUser>QueryString>RouteTenant>HeaderTenant>Cookie. If QueryString resolves to the tenant, the tenant switching box will not be displayed. It means that QueryString is not effective. Moreover, the callback url includes many strange characters, and the encodeURIComponent cannot be parsed, but it starts with /Account/Login?ReturnUrl=/connect/authorize/callback?__tenant=ea4a820e-9555-7f83-60c7-39f586e7efe0&client_id=backend-admin-app- client&redirect_uri=

  Save Cancel
• 

  0

  liangshiwei created 4 years ago

  Support Team Fullstack Developer

  Hi,

  Display problem only,You can continue to login as a tenant users.

  Save Cancel
• 

  0

  liangshiwei created 4 years ago

  Support Team Fullstack Developer

  Add IdentityServerTenantResolveContributor class to your project.

  public class IdentityServerTenantResolveContributor : HttpTenantResolveContributorBase
    {
          public override string Name => "IdentityServer";
  
          protected override string GetTenantIdOrNameFromHttpContextOrNull(ITenantResolveContext context,
              HttpContext httpContext)
          {
              if (httpContext.Request.Path == "/Account/Login" && httpContext.Request.Query.ContainsKey("ReturnUrl"))
              {
                  var interaction = httpContext.RequestServices.GetService<IIdentityServerInteractionService>();
                  var authorizationContext = AsyncHelper.RunSync(() =>
                      interaction.GetAuthorizationContextAsync(httpContext.Request.Query["ReturnUrl"]));
  
                  if (context != null)
                  {
                      //TODO: Reference AspNetCore MultiTenancy module and use options to get the tenant key!
                      var tenantIdOrName = authorizationContext.Parameters[context.GetAbpAspNetCoreMultiTenancyOptions().TenantKey];
  
                      return tenantIdOrName;
                  }
              }
  
              return null;
          }
    }
  

  Then configure AbpTenantResolveOptions options to add IdentityServerTenantResolveContributor in AuthServerHostModule.

  Configure<AbpTenantResolveOptions>(opt =>
  {
     opt.TenantResolvers.Add(new IdentityServerTenantResolveContributor());
  });
  

  Save Cancel
• 

  0

  gaoyao created 4 years ago

  Thanks for your patience to answer, my problem has been solved. **BackendAdminApp.Host **project adds tenant resolution based on second-level domain and Querystring ` Configure

             options.TenantResolvers.InsertAfter(
             r => r is CurrentUserTenantResolveContributor,
             new CustomDomainTenantResolveContributor("{0}.mydomain.com")
         );
          });
          
           .AddOpenIdConnect("oidc", options =>
              {
                  options.Authority = configuration["AuthServer:Authority"];
                  options.ClientId = configuration["AuthServer:ClientId"];
                  options.ClientSecret = configuration["AuthServer:ClientSecret"];
                  options.RequireHttpsMetadata = false;
                  options.ResponseType = OpenIdConnectResponseType.CodeIdToken;
                  options.SaveTokens = true;
                  options.GetClaimsFromUserInfoEndpoint = true;
                  options.Scope.Add("profile");
                  options.Scope.Add("role");
                  options.Scope.Add("email");
                  options.Scope.Add("phone");
                  options.Scope.Add("BackendAdminAppGateway");
                  options.Scope.Add("BloggingService");
                  options.ClaimActions.MapAbpClaimTypes();
  
                  //// Add the following code
                  options.Events.OnRedirectToIdentityProvider = redirectContext =>
                  {
                      var currentTenant = redirectContext.HttpContext.RequestServices.GetService<ICurrentTenant>();
                      if (currentTenant.Id.HasValue)
                      {
                          var multiTenancyOptions = redirectContext.HttpContext.RequestServices.GetService<IOptions<AbpAspNetCoreMultiTenancyOptions>>().Value;
                          redirectContext.ProtocolMessage.IssuerAddress += $"?{multiTenancyOptions.TenantKey}=" + currentTenant.Id.Value;
                      }
                      return Task.CompletedTask;
                  };
  
  
              });           
          
          `
  

  AuthServer.Host Add IdentityServerTenantResolveContributor class

          `  Configure<AbpTenantResolveOptions>(opt =>
          {
              //opt.TenantResolvers.Add(new IdentityServerTenantResolveContributor());
  
              opt.TenantResolvers.InsertAfter(
           r => r is CurrentUserTenantResolveContributor,
           new IdentityServerTenantResolveContributor()
          );
          });
          
          
           public class IdentityServerTenantResolveContributor : HttpTenantResolveContributorBase
  {
      public override string Name => "IdentityServer";
  
      protected override string GetTenantIdOrNameFromHttpContextOrNull(ITenantResolveContext context,
          HttpContext httpContext)
      {
          if (httpContext.Request.Path == "/Account/Login" && httpContext.Request.Query.ContainsKey("ReturnUrl"))
          {
              var interaction = httpContext.RequestServices.GetService<IIdentityServerInteractionService>();
              var authorizationContext = AsyncHelper.RunSync(() =>
                  interaction.GetAuthorizationContextAsync(httpContext.Request.Query["ReturnUrl"]));
  
              if (context != null)
              {
                  //TODO: Reference AspNetCore MultiTenancy module and use options to get the tenant key!
                  var tenantIdOrName = authorizationContext.Parameters[context.GetAbpAspNetCoreMultiTenancyOptions().TenantKey];
  
                  return tenantIdOrName;
              }
          }
  
          return null;
      }
  }
          
          `
  

  Save Cancel