Activities of "balessi75"

I'm trying to create a new project from the template and I'm getting the following when clicking on the login link.. I already ran yarn and abp install-libs from the solution folder.

An unhandled exception occurred while processing the request. AbpException: Could not find the bundle file '/libs/bootstrap/js/bootstrap.enable.tooltips.everywhere.js' for the bundle 'Lepton.Global'! Volo.Abp.AspNetCore.Mvc.UI.Bundling.TagHelpers.AbpTagHelperResourceService.ProcessAsync(ViewContext viewContext, TagHelper tagHelper, TagHelperContext context, TagHelperOutput output, List<BundleTagHelperItem> bundleItems, string bundleName)

Yes, every user has a confirmed email, but 2fa isn't enforced because its turned off at the user level.

in our system all users self-register and when the tenant is set to have 2fa Forced, all newly registered users get created with 2fa turned off, so in essence 2fa is never forced. so this means an admin has to manually visit each user to turn on 2fa?

Additionally, in our system all users will always have a verified email for use in 2fa.

Thanks.

If I change the tenant's 2FA setting to 'Forced', the user cannot turn on/off their 2FA under their profile which makes sense. but if the user had 2FA turned off on their profile and the tenant setting is now set to 'Forced', shouldn't the user have to perform 2fa to login in? This user has a 2fa provider setup for email.

In order to make this work, we had to set the tenant 2FA setting back to 'Optional' then turn on 2FA for the user, then set the tenant back to 'Forced'

Is there something we are missing here? shouldn't all users be required to do 2fa if it is setup as 'Forced' on the tenant level (regardless of what the setting is on the user level)?

Thank you!

Thanks as always @liangshiwei

This was very helpful!

Hi,

you can try

services.ConfigureApplicationCookie(options => 
{ 
    options.ExpireTimeSpan = TimeSpan.FromMinutes(10); 
    options.SlidingExpiration = true; 
}); 

We added this and it had no affect. The user continues to stay logged in after the specified ExpireTimeSpan. During that timespan, no requests were sent to the server.

That makes sense. Thanks @liangshiwei !!

Thanks @liangshiwei