Activities of "maliming"

The process are:

1. localhost:4200 -> login -> redirect - https://localhost:44333/Account/Login
2. OpenIdConnect -> auth0.com(redirect url is https://localhost:44333/api/oidc/ExternalLoginCallback)
3. signing at auth0 -> https://localhost:44333/api/oidc/ExternalLoginCallback -> http://localhost:4200/?code=UAbYIzkcPox30xx
4. success

The access_token are issuer from https://localhost:44333 instead of auth0.com

sure : )

unauthorized_client: Callback URL mismatch. https://localhost:44333/signin-oidc is not in the list of allowed callback URLs

hi

You have to use a different URL for the same GET actions.

[HttpGet]
[Route("all")]
public Task<List<DocumentInboxForViewDto>> GetAllAsync(GetDocumentInboxesInput input)
{
return _documentInboxesAppService.GetAllAsync(input);
}

[HttpGet]
public virtual Task<PagedResultDto<DocumentInboxDto>> GetListAsync(GetDocumentInboxesInput input)
{
return _documentInboxesAppService.GetListAsync(input);
}

ok

I have downloaded your project. Can you share the steps to reproduce the problem?

Thanks.

hi

You can create a new GitHub private repository and invite me as a contributor.

https://github.com/maliming

hi

POC project not able to shared you because browser restriction

What does that mean?

You can share the project via one drive, google drive or https://wetransfer.com/

Please include the steps to reproduce the problem.

Thanks.

The scope in your access_token only have openid

Please update your code as below:

var userClaimsPrincipalFactory = context.HttpContext.RequestServices.GetRequiredService<IUserClaimsPrincipalFactory<Volo.Abp.Identity.IdentityUser>>();

var claimsPrincipal = await userClaimsPrincipalFactory.CreateAsync(user);

//Remove
-claimsPrincipal.SetScopes(claimsPrincipal.GetScopes());
-claimsPrincipal.SetResources(await GetResourcesAsync(context, claimsPrincipal.GetScopes()));

/Add
+claimsPrincipal.SetScopes(request.GetScopes());
+claimsPrincipal.SetResources(await GetResourcesAsync(context, request.GetScopes()));


await context.HttpContext.RequestServices.GetRequiredService<AbpOpenIddictClaimsPrincipalManager>().HandleAsync(context.Request, claimsPrincipal);

return new Microsoft.AspNetCore.Mvc.SignInResult(OpenIddictServerAspNetCoreDefaults.AuthenticationScheme, claimsPrincipal);

The log does not contain the internal exception.

The logs of this 500 error should exist on the project, which depends on the AbpAccountPublicApplicationModule(Volo.Abp.Account.Pro.Public.Application) module.

[14:10:09 INF] [] Request starting "HTTP/2" "GET" "https"://"localhost:44359""""/api/account/my-profile""" - null null
[14:10:09 INF] [] CORS policy execution successful.
[14:10:09 INF] [] Handling request: /api/account/my-profile
[14:10:09 INF] [] Handling request logProject: product
[14:10:09 INF] [] Handling request logProjectGroupName: /ecs/product-dev-gateway
[14:10:09 INF] [] Handling request logProject change tenant: product
[14:10:09 INF] [Product] Executing endpoint '"Volo.Abp.Account.ProfileController.GetAsync (Volo.Abp.Account.Pro.Public.HttpApi)"'
[14:10:09 INF] [Product] Route matched with "{area = \"account\", controller = \"Profile\", action = \"Get\", page = \"\"}". Executing controller action with signature "System.Threading.Tasks.Task`1[Volo.Abp.Account.ProfileDto] GetAsync()" on controller "Volo.Abp.Account.ProfileController" ("Volo.Abp.Account.Pro.Public.HttpApi").
[14:10:09 INF] [Product] Executed action "Volo.Abp.Account.ProfileController.GetAsync (Volo.Abp.Account.Pro.Public.HttpApi)" in 13.5452ms
[14:10:09 INF] [Product] Executed endpoint '"Volo.Abp.Account.ProfileController.GetAsync (Volo.Abp.Account.Pro.Public.HttpApi)"'
[14:10:09 INF] [] Finished handling request.
[14:10:09 INF] [] Request finished "HTTP/2" "GET" "https"://"localhost:44359""""/api/account/my-profile""" - 500 null "application/json" 195.4187ms

hi

Try to add scope to connect/token request

Global search the _scopeManager.CreateAsync in your solution.

await _scopeManager.CreateAsync(new OpenIddictScopeDescriptor {
    Name = "MyProjectName", DisplayName = "MyProjectName API", Resources = { "MyProjectName" }
});