Activities of "maliming"

hi

context.Services.AddAuthentication(OpenIdConnectDefaults.AuthenticationScheme)
            .AddJwtBearer(options =>
            {
                options.Authority = configuration["AuthServer:Authority"];
                options.RequireHttpsMetadata = Convert.ToBoolean(configuration["AuthServer:RequireHttpsMetadata"]);
                options.Audience = "BookPro";
            })
            .AddMicrosoftIdentityWebApp(
                microsoftIdentityOptions =>
                {
                    microsoftIdentityOptions.Instance = "https://exceegobtoc.xxx.com/";
                    microsoftIdentityOptions.Domain = "xxx.onmicrosoft.com";
                    microsoftIdentityOptions.TenantId = "xxx";
                    microsoftIdentityOptions.ClientId = "xxx";
                    microsoftIdentityOptions.ClientSecret = "xxx";

                    microsoftIdentityOptions.CallbackPath = "/signin-oidc-demo";
                    microsoftIdentityOptions.SignedOutCallbackPath = "/signout-callback-oidc";
                    microsoftIdentityOptions.SignUpSignInPolicyId = "xxx";
                },
                cookieAuthenticationOptions =>
                {

                },
                OpenIdConnectDefaults.AuthenticationScheme,
                CookieAuthenticationDefaults.AuthenticationScheme,
                false,
                null);

        context.Services.PostConfigure<OpenIdConnectOptions>(OpenIdConnectDefaults.AuthenticationScheme, options =>
        {
            options.SignInScheme = IdentityConstants.ExternalScheme;
            options.ClaimActions.Add(new AddClaims());
        });

class AddClaims : ClaimAction
{
    public AddClaims()
        : base(null, null)
    {
    }

    public override void Run(JsonElement userData, ClaimsIdentity identity, string issuer)
    {
        var sub = identity.Claims.FirstOrDefault(x => x.Type == "sub");
        if (sub != null)
        {
            identity.AddClaim(new Claim(ClaimTypes.NameIdentifier, sub.Value));
        }

        var emails = identity.Claims.FirstOrDefault(x => x.Type == "emails");
        if (emails != null)
        {
            identity.AddClaim(new Claim(ClaimTypes.Email, emails.Value));
        }
    }
}
``

hi

Can you share a sample project? liming.ma@volosoft.com

OK, I will check it asap.

hi

https://github.com/abpframework/abp/issues/13983

hi

Please share your azure configuration info and test account&password to liming.ma@volosoft.com

hi

Can you check the ajax response of GetListAsync in your angular app?

hi

I don't see the problem from the code. You can simply try your idea in the template project and if you find a problem, we can fix it.

Thanks @woodyarray

Is it possible to reproduce the problem using the brand new template project?

user "user1" has role "role1" User "user1" belongs to orgnization unit "org1" after login for a entity how we can filter data based on user "role" or "organization unit"

hi

1. get user roles of the current user.
2. get user organization units of the current user.
3. add where to filter based on the 1 and 2 results.