Activities of "EngincanV"

This the error that im getting with services and similar to authserver as well.

SqlException has been thrown. The operation will be tried 2 times more. Exception: Login failed for user 'sa'.. Stack Trace: at Microsoft.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj, Boolean callerHasConnectionLock, Boolean asyncClose) at Microsoft.Data.SqlClient.TdsParser.TryRun(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj, Boolean& dataReady) at Microsoft.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj) at Microsoft.Data.SqlClient.SqlInternalConnectionTds.CompleteLogin(Boolean enlistOK) at Microsoft.Data.SqlClient.SqlInternalConnectionTds.LoginNoFailover(ServerInfo serverInfo, String newPassword, SecureString newSecurePassword, Boolean redirectedUserInstance, SqlConnectionString connectionOptions, SqlCredential credential, TimeoutTimer timeout) at Microsoft.Data.SqlClient.SqlInternalConnectionTds.OpenLoginEnlist(TimeoutTimer timeout, SqlConnectionString connectionOptions, SqlCredential credential, String newPassword, SecureString newSecurePassword, Boolean redirectedUserInstance) at Microsoft.Data.SqlClient.SqlInternalConnectionTds..ctor(DbConnectionPoolIdentity identity, SqlConnectionString connectionOptions, SqlCredential credential, Object providerInfo, String newPassword, SecureString newSecurePassword, Boolean redirectedUserInstance, SqlConnectionString userConnectionOptions, SessionData reconnectSessionData, Boolean applyTransientFaultHandling, String accessToken, DbConnectionPool pool) at Microsoft.Data.SqlClient.SqlConnectionFactory.CreateConnection(DbConnectionOptions options, DbConnectionPoolKey poolKey, Object poolGroupProviderInfo, DbConnectionPool pool, DbConnection owningConnection, DbConnectionOptions userOptions) at Microsoft.Data.ProviderBase.DbConnectionPool.CreateObject(DbConnection owningObject, DbConnectionOptions userOptions, DbConnectionInternal oldConnection) at Microsoft.Data.ProviderBase.DbConnectionPool.UserCreateRequest(DbConnection owningObject, DbConnectionOptions userOptions, DbConnectionInternal oldConnection) at Microsoft.Data.ProviderBase.DbConnectionPool.TryGetConnection(DbConnection owningObject, UInt32 waitForMultipleObjectsTimeout, Boolean allowCreate, Boolean onlyOneCheckConnection, DbConnectionOptions userOptions, DbConnectionInternal& connection) at Microsoft.Data.ProviderBase.DbConnectionPool.WaitForPendingOpen() --- End of stack trace from previous location -

I have tried connecting to sql server running in docker from ssms host machine localhost,1434 -

Hi, you said that you are using the default password coming from the ABP Studio templates, however, the default password is myPassw@rd. It seems that you changed the default password (or using an already running sql-server container). Can you confirm?

If you changed the password, please don't forget to change it in the services' appsettings.json files:

Hi,
I'm not looking for this to be added as a feature request - I need to implement this functionality **now ** in my current project. Could you please provide guidance on how to implement role-based filtering for the user list with these specific requirements?

For non-admin users:

• Filter out users with admin roles from the list
• Restrict view/management to non-admin users only

For admin users:

• Maintain full visibility of all users
• Keep all existing management capabilities

Thank you

Hi, sure. For that purpose, you should extend application services and interface implementations (https://abp.io/docs/latest/framework/architecture/modularity/extending/customizing-application-modules-overriding-services).

For example, you should extend the IdentityUserAppService and override some of its methods, such as GetListAsync method and check if the current-user has an admin role or not and then call the relevant repository method (of course you should also create a new repository method for that purpose - maybe you can use custom Data-Filtering):

[Dependency(ReplaceServices = true)]
[ExposeServices(typeof(IIdentityUserAppService))]
public class MyIdentityUserAppService : IIdentityUserAppService, ITransientDependency
{
    //...
    
    public override async Task<PagedResultDto<IdentityUserDto>> GetListAsync(GetIdentityUsersInput input)
    {
        if(!CurrentUser.IsInRole("admin"))
        {
            //call new repository method which filters to not show the 'admin' users
        }
        
        //keep the existing behaviour
        return await base.GetListAsync(input);    
    }
}

Hi,

Can you provide me with a code example of the SignalR approach you are suggesting?

Hi, you can create a Hub, and then use the DisconnectAsync() method to control the disconnections (https://abp.io/docs/latest/framework/real-time/signalr):

1-) Create a Hub:

public class UserConnectionHub : AbpHub
{
    public override async Task OnDisconnectedAsync(Exception exception)
    {
        await HandleUserLogout(Context.ConnectionId); //or your custom logic...
        
        await base.OnDisconnectedAsync(exception);
    }
}

2-) In your blazor side (connect):

        var connection = new HubConnectionBuilder()
            .WithUrl("/userConnectionHub")
            .WithAutomaticReconnect()
            .Build();
        
        try
        {
            await connection.StartAsync();
            Console.WriteLine("SignalR Connected.");
        }
        catch (Exception ex)
        {
            Console.WriteLine($"SignalR Connection Failed: {ex.Message}");
        }

You can call the code above, in a constructor of your blazor pages (in the base class).

To be more specific it is the default password that comes with the microservice template architute using abp studio

Okay. I guess it gives an error as below right?

2/5/2025 8:39:39 AM    [Error] Microsoft.Data.SqlClient.SqlException (0x80131904): Cannot open database "Question8744_Administration" requested by the login. The login failed.
Login failed for user 'sa'.

This means, your auth-server is up, but the administration service is either not up or hasn't created the database yet. So, please also run the all services and wait for 1-2 minutes to data seeders to be completed. Then, you will be able to open the auth-server and other services and applications:

I am editing the same template as you-- if I put hook point 11 and 12 before and after %%child-entities-create-edit-modals%% neither hook point will show up, I get blank lines instead. Same result if I put the custom-code-blocks in the <modal> or in the <ModalContent> section right above. I have tested with a few different positions. All that appears in the generated .razor files is whitespace.

^^ another trial that did not work

Hi, I'm able to reproduce your problem and will create an issue for this problem (our qa team could not reproduce it at the first time, because they first customized the template and then generated the pages). In the meantime, you can customize the template, then delete the *.razor (your razor file) and regenerate again. This will add the other placeholders to your file and they will not be overridden. Alternatively, instead of deleting the file, you can manually add the placeholder to both templates in Suite UI and in your application.

Btw, your ticket has been refunded. Thanks for reporting this problem. Regards.

Hi

Just following up on this ticket. Its quite urgent and I am getting disappointed with the lack of response. This ticket is 9 days old now and I have only received 2 responses to date.

Thank you.

Hi, since this is not fully related to ABP, we need to test with your configurations and this takes some time. Sorry for the lack of communication. I will provide you with an answer asap.

Hi, unfortunately, I can't help with the first one, because we need more information, it's hard to understand the reason.

For the second problem, you have option to disable the recaptcha completely or check your credentials. Because we are using Google's Recaptcha and not customizing it.

Please check your settings.

For the last one, when you register, yes the user's cookie becomes invalid and expect it to re-login again.

Description:

Currently, in ABP, enforcing multi-factor authentication (MFA) only includes SMS/email methods, which are not considered fully secure. There is no option to enforce the use of an authenticator app.

Problem:

• The current MFA enforcement does not include authenticator apps.
• SMS and email are vulnerable to attacks (e.g., phishing, SIM-swap).
• From a standard business security requirements perspective, an authenticator app should be available as a mandatory MFA option.

Expected Solution:

• Add an option to enforce MFA using an authenticator app (Google Authenticator, Microsoft Authenticator, etc.).
• Allow administrators (preferably at the tenant level) to enforce this setting for all users.
• During login, check if the user has already configured an authenticator app. If not, enforce its setup, similar to the existing process available in the "My Account" section.

Benefits:

• Improved login security.
• Compliance with modern security standards.
• Better control for administrators over MFA policies.

ABP already provides 2fa with an authenticator app, see https://abp.io/docs/9.0/modules/identity/two-factor-authentication#user-side

Any update on this? web version also not working.

Hi, we updated the react-native template versions and changed to TypeScript (all .js files to .tsx) for the react-native applications except for the microservice template. I will create an internal issue for this.

Regards.

With layered application template the web version throws error and unable to run.

If you are talking about React-Native application, yes there is a known issue due to expo migration. We are currently working on that and will try to fix and release a patch version asap. Thanks for your understanding.

Regards.

Hi again, we tested but could not reproduce your problem. Adding more than 10 custom hook points are working as expected:

Can you provide more information? For example, which template did you update?