OAuth External Login Problem between two different ABP Projects #3866

13 Answer(s)

• 

  0

  maliming created 2 years ago

  Support Team Fullstack Developer

  hi

  Unable to get the email of external user!

  Try to debug the MapClaimsToExternalLoginUserInfoAsync method. share the values of claims

  Configure<AbpIdentityOptions>(options =>
  {
      options.ExternalLoginProviders.RemoveAll(x => x.Key == "OAuth");
      options.ExternalLoginProviders.Add<MyOAuthExternalLoginProvider>(MyOAuthExternalLoginProvider.Name);
  });
  
  
  public class MyOAuthExternalLoginProvider : OAuthExternalLoginProvider
  {
      public const string Name = "OAuth";
  
      public ILogger<OAuthExternalLoginProvider> Logger { get; set; }
  
      protected OAuthExternalLoginManager OAuthExternalLoginManager { get; }
  
      protected ISettingProvider SettingProvider { get; }
  
      protected IFeatureChecker FeatureChecker { get; }
  
      protected AbpOAuthExternalLoginProviderOptions Options { get; }
  
  
      public MyOAuthExternalLoginProvider(
          IGuidGenerator guidGenerator,
          ICurrentTenant currentTenant,
          IdentityUserManager userManager,
          IIdentityUserRepository identityUserRepository,
          IOptions<IdentityOptions> identityOptions,
          OAuthExternalLoginManager oAuthExternalLoginManager,
          ISettingProvider settingProvider,
          IFeatureChecker featureChecker,
          IOptions<AbpOAuthExternalLoginProviderOptions> options)
          : base(guidGenerator, currentTenant, userManager, identityUserRepository, identityOptions, oAuthExternalLoginManager, settingProvider, featureChecker, options)
      {
      }
  
      protected override Task<ExternalLoginUserInfo> MapClaimsToExternalLoginUserInfoAsync(IEnumerable<Claim> claims)
      {
          var claimsArray = claims as Claim[] ?? claims.ToArray();
  
          var email = claimsArray.FirstOrDefault(x => x.Type == Options.EmailClaimType);
          if(email == null)
          {
              throw new Exception("Unable to get the email of external user!");
          }
  
          var userInfo = new ExternalLoginUserInfo(email.Value)
          {
              Name = claimsArray.FirstOrDefault(x => x.Type == Options.NameClaimType)?.Value,
              Surname = claimsArray.FirstOrDefault(x => x.Type == Options.SurnameClaimType)?.Value,
              EmailConfirmed = claimsArray.FirstOrDefault(x => x.Type == Options.EmailConfirmedClaimType)?.Value.To<bool>() ?? false,
              PhoneNumber = claimsArray.FirstOrDefault(x => x.Type == Options.PhoneNumberClaimType)?.Value,
              PhoneNumberConfirmed = claimsArray.FirstOrDefault(x => x.Type == Options.PhoneNumberConfirmedClaimType)?.Value.To<bool>() ?? false,
              ProviderKey = claimsArray.FirstOrDefault(x => x.Type == Options.ProviderKeyClaimType)?.Value
          };
  
          return Task.FromResult(userInfo);
      }
  
  }
  

  Save Cancel
• 

  0

  yavuz.ozbek created 2 years ago

  Here is the debug value of claims:

  

  Save Cancel
• 

  0

  maliming created 2 years ago

  Support Team Fullstack Developer

  hi

  It seems your oauth server does not return the required claims.

  

  Save Cancel
• 

  0

  yavuz.ozbek created 2 years ago

  My OAuth server is an application that is an mvc application created from abp suite. I add Angular app's informations to open id dict which i add the picture to first message. So how can i add required claims to oauth (Web app that was created from suite) server ?

  Save Cancel
• 

  0

  maliming created 2 years ago

  Support Team Fullstack Developer

  hi

  Can you share a minimum project with me?

  Save Cancel
• 

  0

  yavuz.ozbek created 2 years ago

  Hi,

  I have created starter ASP.Net MVC project via suite and share with you on github.

  Save Cancel
• 

  0

  maliming created 2 years ago

  Support Team Fullstack Developer

  hi

  What are the steps to reproduce the problem on your shared project?

  Save Cancel
• 

  0

  yavuz.ozbek created 2 years ago

  It's not as complicated as you think. I have different two ABP Projects. One is MVC other is Angular based.

  1. I created new Asp.Net MVC project from abp suite (OAuth server)
  2. I created another new Angular based abp project from abp suite. (Different client project )
  3. In the above first message i added a picture that's name is Openiddict Application Configuration (In mvc project add a new configuration for other abp angular client )
  4. In the above first message i added a picture that's name is Angular Project Client (In angular project add fill the OAuth Login Setting)

  I did not do any extra action other than what I wrote above. Then when i login in Angular project it authenticates from OAuth server bu gets Exception: Unable to get the email of external user! namely my oauth server does not return the required claims.

  Save Cancel
• 

  0

  maliming created 2 years ago

  Support Team Fullstack Developer

  Can you provide these two projects(MVC & angular)? I hope I can reproduce the problem locally and then fix it.

  Save Cancel
• 

  0

  yavuz.ozbek created 2 years ago

  I shared two projects with you in github

  Save Cancel
• 

  0

  maliming created 2 years ago

  Support Team Fullstack Developer

  Thanks, I will check it asap

  Save Cancel
• 

  0

  maliming created 2 years ago

  Support Team Fullstack Developer

  hi

  Use Angular profile email address roles as Scope.

  

  

  Save Cancel
• 

  0

  yavuz.ozbek created 2 years ago

  Hi,

  Thanks. I add these scopes to both client and server apps then it gets email address and login is successfull

  Save Cancel