Activities of "cvarela@ld"

This worked. Thank you @maliming.

Hi Re: Issue 1: After adding that change it no longer attempts to send the post to the blazor server app but it doesn't work, after clicking switch it just shows the auth server . These are the logs: [22:58:39 ERR] Invalid RedirectUrl: https://localhost:44337/Account/Challenge, Use AppUrlProvider to configure it! [22:58:39 INF] Executed handler method OnPostAsync, returned result Microsoft.AspNetCore.Mvc.RedirectResult. [22:58:39 INF] Executing RedirectResult, redirecting to /. [22:58:39 INF] Executed page /Account/SwitchTenantLogin in 159.043ms [22:58:39 INF] Executed endpoint '/Account/SwitchTenantLogin' [22:58:39 INF] Request finished HTTP/2 POST https://localhost:44335/Account/SwitchTenantLogin?access_token=eyJhbGciOiJSUzI1NiIsImtpZCI6IkI1MUNGRTg3N0QwNTE3NTE4MDZGQkM4RjdFNTU4MUMzOTZBMUU3NEIiLCJ4NXQiOiJ0UnotaDMwRkYxR0FiN3lQZmxXQnc1YWg1MHMiLCJ0eXAiOiJhdCtqd3QifQ.eyJpc3MiOiJodHRwczovL2xvY2FsaG9z... [22:58:39 INF] Request starting HTTP/2 GET https://localhost:44335/ - null null

Re: Issue 2: Than you for the detailed explanation, I will attempt to implement the pattern you described.

Thank you.

• Issue 1: I can confirm that https://localhost:44337/Account/SwitchTenantLogin is a post to the blazor server project. How do I make it post the auth server project?
• Issue 2: This approach sounds good to me but I would need to know how to programmatically invite and accept users in the tenant.

Hello!

We're migrating from ABP 10.1 to ABP 10.3 because we want to use the new User Shared Accounts feature. We were able to complete the migration successfully but we have two issues we would like some help with:

1. After successful login we tried the "switch tenant" option but it fails with error 405. Here's a screenshot: . No errors in the logs, just this: [17:56:06 INF] Request starting HTTP/2 POST https://localhost:44337/Account/SwitchTenantLogin - application/x-www-form-urlencoded 105 [17:56:06 DBG] Starting resolving tenant... [17:56:06 DBG] Trying to resolve tenant through 'CurrentUser'... [17:56:06 DBG] Tenant resolved by 'CurrentUser' as 'Host'. [17:56:06 DBG] No tenant resolved. [17:56:06 DBG] Get dynamic claims cache for user: 49de4b5d-8fd0-c336-518d-3a213b12d893 [17:56:06 INF] Executing endpoint '405 HTTP Method Not Supported' [17:56:06 INF] Executed endpoint '405 HTTP Method Not Supported' [17:56:06 INF] Request finished HTTP/2 POST https://localhost:44337/Account/SwitchTenantLogin - 405 0 null 4.3153ms

2. In the previous version we had a list of pre-defined users that were seeded to every tenant using IDataSeedContributor so when ever we created a tenant it will have some default users ready to use. This process now fails because users have to be globally unique, do you have any recommendation on how to achieve the same thing with this new version? I know we can invite the users to the tenant but that's a manual process and it requires that the user accepts the invitation in their email. We want the creation of these default users to be automatic.

Thank you in advance for your help!

Awesome! Thank you very much for all the help. Closing the ticket now.

Overriding OpenIddictImpersonateTenantModel as above didn't work either but I noticed that the constructor of the class I created MyImpersonateTenantModel was being called, it was the OnPostAsync method that was never called. I also noticed that the OnGetAsync method is being called when I impersonate so I instead overrode that method like this:

And it worked:

Can you confirm this is okay?

Hi, Thank you for the code, I was able to override the impersonation dialog. However I couldn't override ImpersonationExtensionGrant. I created the class and inherited from ImpersonationExtensionGrant: As you can see I always return forbidden so it should fail but it doesn't it aways succeeds.

I also added the code in configure services: I added logs and ran it with the debugger attached but that code never runs.

Thank you!

This looks exactly like I was looking for, one more question: Is it possible to override the dialog as well? We might want to remove or replace the username input in the dialog all together.

The overall flow of what needs to be done is clear to me but how do I call the Account impersonation API? is there a service or controller I need to override? also how do I replace the original "Login with this tenant option" from the tenant dropdown?

We want to have finer control so implementing our own “Login with this tenant” flow would be the way to go. Can you point me to some documentation on how to do this?