Activities of "maliming"

hi

Can you check the entity data in the database with eventData.Id?

Key focus on the ExtraProperties property.

Thanks.

hi

The EmailTokenProvider implementation is TotpSecurityStampBasedTokenProvider by default.

It uses a fixed TimeSpan.FromMinutes(3) value.

see https://github.com/dotnet/aspnetcore/issues/27088

Thanks.

Thanks, we also will increase the length in abp 10.0

hi

Can you share your event class?

It seems that there is an issue with the data in the database.

Please also share the code of MaintenanceRequestClosedEventHandler.cs

Thanks

hi

But when we call verify password reset token with 6 digit code it validates all the time except when a new one created.

What is your code?

Thanks.

hi

You can

1. Change the IdentitySessionConsts.MaxDeviceInfoLength and add a new EF Core migration to increase the length of the session entity.

public class IdentitySessionConsts
{
    public static int MaxSessionIdLength { get; set; } = 128;

    public static int MaxDeviceLength { get; set; } = 64;

    public static int MaxDeviceInfoLength { get; set; } = 64;

    public static int MaxClientIdLength { get; set; } = 64;

    public static int MaxIpAddressesLength { get; set; } = 2048;
}

2. Replace the built-in IWebClientInfoProvider service.

using Microsoft.AspNetCore.Http;
using Microsoft.Extensions.Logging;
using MyCSharp.HttpUserAgentParser.Providers;
using Volo.Abp.DependencyInjection;

namespace Volo.Abp.AspNetCore.WebClientInfo;

[Dependency(ReplaceServices = true)]
[ExposeServices(typeof(HttpContextWebClientInfoProvider), typeof(IWebClientInfoProvider))]
public class MyHttpContextWebClientInfoProvider : HttpContextWebClientInfoProvider
{
    public MyHttpContextWebClientInfoProvider(
        ILogger<HttpContextWebClientInfoProvider> logger,
        IHttpContextAccessor httpContextAccessor,
        IHttpUserAgentParserProvider httpUserAgentParser)
        : base(logger, httpContextAccessor, httpUserAgentParser)
    {
    }

    protected override string? GetDeviceInfo()
    {
        var info = base.GetDeviceInfo();
        return info?.Substring(0, 64);
    }
}

hi

I will add an internal issue to track this.

Thanks.

hi

Checking it in OpenIdConnectEvents methods is a good approach.

Thanks.

hi

SupportTwoFactor: Whether the user has an available two-factor authentication method, such as email confirmation, phone number verification, or an authenticator app.

TwoFactorEnabled: Whether the user has enabled two-factor authentication.

Thanks

hi

I will check this. Thanks.