OpenIdConnectProtocolException after upgrading to ABP v8.3.0 #7953

17 Answer(s)

• 

  0

  liangshiwei created 2 months ago

  Support Team Fullstack Developer

  Hi

  ABP will set the sessionid to claims, cache and database.

  

  There are a lot of log messages; can you see them in log files?

  

  Save Cancel
• 

  0

  tech37 created 2 months ago

  Hi

  Thank you for your response. I do see the following in the AuthServer logs:

  2024-09-23 10:21:46.065 +02:00 [DBG] Get SessionId(878aac30-416e-48db-a4de-c425a6ef793f) from IdentitySessionManager. 2024-09-23 10:21:47.448 +02:00 [WRN] Could not find SessionId(878aac30-416e-48db-a4de-c425a6ef793f) in the database.

  However if I look in the AbpSessions table in the database I do find a record for the session Id in questions (878aac30-416e-48db-a4de-c425a6ef793f)

  I hope this helps in resolving the issue.

  Save Cancel
• 

  0

  liangshiwei created 2 months ago

  Support Team Fullstack Developer

  Hi,

  You can override the IdentitySessionManager to debug it step by step.

  [Dependency(ReplaceServices = true)]
  [ExposeServices(typeof(IdentitySessionManager))]
  public class MyIdentitySessionManager : IdentitySessionManager
  {
      public MyIdentitySessionManager(IIdentitySessionRepository identitySessionRepository, ICurrentUser currentUser, IDistributedCache<IdentitySessionCacheItem> cache, ISettingProvider settingProvider, IdentityDynamicClaimsPrincipalContributorCache identityDynamicClaimsPrincipalContributorCache) : base(identitySessionRepository, currentUser, cache, settingProvider, identityDynamicClaimsPrincipalContributorCache)
      {
      }
      
      public override async Task<IdentitySession> FindAsync(Guid id)
      {
          return await UpdateSessionFromCacheAsync(await IdentitySessionRepository.FindAsync(id));
      }
  
      public override async Task<IdentitySession> FindAsync(string sessionId)
      {
          return await UpdateSessionFromCacheAsync(await IdentitySessionRepository.FindAsync(sessionId));
      }
      
      protected override async Task<IdentitySession> UpdateSessionFromCacheAsync([CanBeNull] IdentitySession session)
      {
          if (session == null)
          {
              return null;
          }
  
          var sessionCacheItem = await Cache.GetAsync(session.SessionId);
          if (sessionCacheItem != null && await UpdateSessionFromCacheAsync(session, sessionCacheItem))
          {
              await IdentitySessionRepository.UpdateAsync(session);
          }
  
          return session;
      }
  
      protected override Task<bool> UpdateSessionFromCacheAsync(IdentitySession session, IdentitySessionCacheItem sessionCacheItem)
      {
          if (session == null)
          {
              return Task.FromResult(false);
          }
  
          if (sessionCacheItem == null)
          {
              return Task.FromResult(false);
          }
  
          var changed = false;
          if (sessionCacheItem.CacheLastAccessed != null && (session.LastAccessed == null || sessionCacheItem.CacheLastAccessed > session.LastAccessed))
          {
              session.UpdateLastAccessedTime(sessionCacheItem.CacheLastAccessed);
              changed = true;
          }
  
          if (!sessionCacheItem.IpAddress.IsNullOrWhiteSpace())
          {
              var ipAddresses = session.GetIpAddresses().ToList();
              ipAddresses.RemoveAll(x => x == sessionCacheItem.IpAddress);
              ipAddresses.Add(sessionCacheItem.IpAddress);
              session.SetIpAddresses(ipAddresses);
              changed = true;
          }
  
          return Task.FromResult(changed);
      }
  }
  

  Save Cancel
• 

  0

  tech37 created 2 months ago

  Hi thank you I tried that and my findings below:

  var sessionCacheItem = await Cache.GetAsync(session.SessionId); returns null

  

  when I force await IdentitySessionRepository.UpdateAsync(session); i get a websocket error as below

  

  Save Cancel
• 

  0

  liangshiwei created 2 months ago

  Support Team Fullstack Developer

  Hi

  If session is not null, then the check will pass

  

  Save Cancel
• 

  0

  tech37 created 2 months ago

  Update:

  I ran it again and saw this issue which if you continue the code continues to run

  The override class is invoked 3 times in the process and the 3rd time is the following:

  When the page changes to https://localhost:44370/signin-oidc it runs the override class again and the function protected override async Task<IdentitySession> UpdateSessionFromCacheAsync([CanBeNull] IdentitySession session) received a null value for session which causes the underlying issue

  Save Cancel
• 

  0

  tech37 created 2 months ago

  Hi There.

  Just following up to see if you have any updates on the issue?

  Save Cancel
• 

  0

  liangshiwei created 2 months ago

  Support Team Fullstack Developer

  Hi,

  I just think there is something wrong with your project structure.

  

  For Auth Server Separated solution, the Blazor.Server project should not rely on Volo.Abp.Identity.Pro.Domain project.

  

  Save Cancel
• 

  0

  liangshiwei created 2 months ago

  Support Team Fullstack Developer

  Could you please share a minimal reproducible project with me? i will check it.

  shiwei.liang@volosoft.com

  Save Cancel
• 

  0

  tech37 created 2 months ago

  Hi thank you. Can we do a quick google meet perhaps? my email address faldielb@gmail.com

  Save Cancel
• 

  0

  tech37 created 2 months ago

  I dont have the same structure as you are showing. I have:

  Save Cancel
• 

  0

  tech37 created 2 months ago

  These are the packages my blazor poject depend on:

  

  Save Cancel
• 

  0

  tech37 created 2 months ago

  Hi Just an update my side. I did some more debugging

  

  The above code cannot find the session in questions ("3cb289a7-6c89-410f-bce1-884ea1641a49")

  But in the new AbpSessions table (created by v8.3.0) there is a record for that session in the table:

  I would like to sort this out today as I go on a 2 week holiday tomorrow

  Save Cancel
• 

  0

  tech37 created 2 months ago

  Hi

  If I place the IdentitySessionRepository.FindAsync(sessionId) request in a while loop. The second time it runs it finds the session and the application loads on the home page. This is very strange!

  

  Save Cancel
• 

  0

  tech37 created 2 months ago

  Hi, Just another update.

  Even though the homepage loads, none of the menu options are now available as they were before the upgrade to v8.3.0.

  I am logged in as admin and even the tenant admin menu options are not loading.

  Save Cancel
• 

  0

  tech37 created 2 months ago

  I see these in the debug log which could be causing the issue.

  

  Save Cancel
• 

  0

  liangshiwei created 2 months ago

  Support Team Fullstack Developer

  Hi,

  Hi thank you. Can we do a quick google meet perhaps? my email address faldielb@gmail.com

  okay

  Save Cancel