Use HangFire with AbpHangfireAuthorizationFilter throw HTTP ERROR 401 #4683

17 Answer(s)

• 

  0

  berkansasmaz created 2 years ago

  Support Team .NET Developer

  Any chance to send the content of your OnApplicationInitialization method? Maybe you have a missing or misordered request-response pipeline.

  Save Cancel
• 

  0

  augustin.couval@manuloc.eu created 2 years ago

  
      public override void OnApplicationInitialization(ApplicationInitializationContext context)
      {
          var app = context.GetApplicationBuilder();
          var env = context.GetEnvironment();
  
          if (env.IsDevelopment())
          {
              app.UseDeveloperExceptionPage();
          }
  
          app.UseAbpRequestLocalization();
          app.UseStaticFiles();
          app.UseAbpSecurityHeaders();
          app.UseRouting();
          app.UseCors();
          app.UseAuthentication();
  
          if (MultiTenancyConsts.IsEnabled)
          {
              app.UseMultiTenancy();
          }
  
          app.UseAuthorization();
          app.UseSwagger();
          app.UseAbpSwaggerUI(options =>
          {
              options.SwaggerEndpoint("/swagger/v1/swagger.json", "Admin API");
  
              var configuration = context.GetConfiguration();
              options.OAuthClientId(configuration["AuthServer:SwaggerClientId"]);
          });
          
  
          app.UseAuditing();
          app.UseAbpSerilogEnrichers();
          app.UseUnitOfWork();
          app.UseConfiguredEndpoints();
          app.UseHangfireDashboard("/hangfire", new DashboardOptions
          {
              AsyncAuthorization = new[] { new AbpHangfireAuthorizationFilter(enableTenant: true, requiredPermissionName: "Admin.HangFire") }
          });
      }```
  

  Save Cancel
• 

  0

  berkansasmaz created 2 years ago

  Support Team .NET Developer

  First of all, UseHangfireDashboard must be before UseConfiguredEndpoints. However, this is not the problem, I tried to reproduce the problem with the information you provided, but I was unsuccessful, here is my code:

  ConfigureServices:

      ...
      ...
      ...
      ...
      ConfigureHangfire(context, configuration);
  

  ConfigureHangfire:

      private void ConfigureHangfire(ServiceConfigurationContext context, IConfiguration configuration)
      {
          context.Services.AddHangfire(config => { config.UseInMemoryStorage(); });
      }
  

  OnApplicationInitialization:

      public override void OnApplicationInitialization(ApplicationInitializationContext context)
      {
          var app = context.GetApplicationBuilder();
          var env = context.GetEnvironment();
  
          if (env.IsDevelopment())
          {
              app.UseDeveloperExceptionPage();
          }
  
          app.UseAbpRequestLocalization();
          app.UseStaticFiles();
          app.UseAbpSecurityHeaders();
          app.UseRouting();
          app.UseCors();
          app.UseAuthentication();
  
          if (MultiTenancyConsts.IsEnabled)
          {
              app.UseMultiTenancy();
          }
  
          app.UseAuthorization();
          app.UseSwagger();
          app.UseAbpSwaggerUI(options =>
          {
              options.SwaggerEndpoint("/swagger/v1/swagger.json", "Admin API");
  
              var configuration = context.GetConfiguration();
              options.OAuthClientId(configuration["AuthServer:SwaggerClientId"]);
          });
  
  
          app.UseAuditing();
          app.UseAbpSerilogEnrichers();
          app.UseUnitOfWork();
          app.UseHangfireDashboard("/hangfire", new DashboardOptions
          {
              AsyncAuthorization = new[]
                  {new AbpHangfireAuthorizationFilter(enableTenant: true, requiredPermissionName: "Admin.HangFire")}
          });
          app.UseConfiguredEndpoints();
      }
  

  When we look at the status code, it returns 401. So, it doesn't see you as authorized, but I think you are logged in. It felt like CurrentUser.IsAuthenticated was returning false somehow. Can you confirm this information by debugging AbpHangfireAuthorizationFilter

  Save Cancel
• 

  0

  augustin.couval@manuloc.eu created 2 years ago

  When I debug AbpHangfireAuthorizationFilter :

  

  I don't see CurrentUser.IsAuthenticated value in locales variables

  Save Cancel
• 

  0

  berkansasmaz created 2 years ago

  Support Team .NET Developer

  Yes, because the CurrentUser service is resolved from RequestServices in IsLoggedIn method.

  See: https://github.com/abpframework/abp/blob/ba6ded35524cd4f743f263f33ac37cbc8f238fcd/framework/src/Volo.Abp.HangFire/Volo/Abp/Hangfire/AbpHangfireAuthorizationFilter.cs#L38-L45

  Save Cancel
• 

  0

  pierremih created 2 years ago

  Hi, In-depth debugging of the AbpHangfireAuthorizationFilter seems impossible becaue the .pdb symbols file cannot be found Can you give me indications on how debug AbpHangfireAuthorizationFilter to confirm that CurrentUser.IsAuthenticated is returning false?

  Save Cancel
• 

  0

  pierremih created 2 years ago

  I could debug the AbpHangfireAuthorizationFilter class. It is indeed detecting us as not authenticated.

  Save Cancel
• 

  0

  berkansasmaz created 2 years ago

  Support Team .NET Developer

  I understand, but you're logged in, right? You can see your account information, or if you are logged in as an admin user, you can visit the page where you can see the list of all users and so on, right? If so, I might need to take a closer look at your project. It's hard to say anything directly.

  Save Cancel
• 

  0

  pierremih created 2 years ago

  I logged in using the swagger's built-in function here

  And when checking the Authentication server's page, it does show me as logged in.

  We can grant you access to the Github repository. Can you confirm this is you ? https://github.com/berkansasmaz Hangfire is being implemented on branch 346-use-hangfire

  Save Cancel

  1
• 

  0

  berkansasmaz created 2 years ago

  Support Team .NET Developer

  I am very happy with the information you have given because I understand the problem. But we need to verify, so can you visit the /account/login page and try again after login?

  Save Cancel
• 

  0

  pierremih created 2 years ago

  Even after login that way, the issue is still the same.

  Save Cancel

  1
• 

  0

  berkansasmaz created 2 years ago

  Support Team .NET Developer

  Got it, you can grant access to this GitHub account.

  Save Cancel
• 

  0

  pierremih created 2 years ago

  I granted you access. The repo is https://github.com/Manuloc/ConfigurationClient/ on the branch https://github.com/Manuloc/ConfigurationClient/tree/346-use-hangfire

  Save Cancel

  1
• 

  0

  berkansasmaz created 2 years ago

  Support Team .NET Developer

  The problem is that you have installed Hangfire in ConfigurateurClient.Admin.HttpApi.Host. If you want to use Hangfire in this project, you should edit ConfigureAuthentication similar to ConfigurateurClient.Admin.Blazor, but I don't recommend it. You don't need to open ConfigurateurClient.Admin.HttpApi.Host outside, it can stay internal. Users with ConfigurateurClient.Admin.Blazor admin privileges can access as the UI allows, but they don't need to access ConfigurateurClient.Admin.HttpApi.Host so you don't need to open its URL outside.

  As a result, if you want to solve the problem with the least effort and with a more accurate method, you can solve the problem by moving similar codes to ConfigurateurClient.Admin.Blazor. I tried it works, you can see the screenshot below.

  

  Save Cancel
• 

  0

  pierremih created 2 years ago

  Thank you for the great news, We will try this solution and come back towards you to confirm the result. Have a nice day

  Save Cancel

  1
• 

  0

  pierremih created 2 years ago

  I moved hangfire to the blazor project and it's working perfectly. Thank you You can mark the issue as resolved

  Save Cancel

  1
• 

  0

  berkansasmaz created 2 years ago

  Support Team .NET Developer

  Closing the issue. Feel free to re-open or create a new issue if you have further questions 😄

  Save Cancel

  1