Token expiration not handled properly #4837

17 Answer(s)

• 

  0

  liangshiwei created 3 years ago

  Fullstack Developer

  If the token expires, what happens if you access the identity/users page?

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  isteer created 3 years ago

  We get redirected to this error page.

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  isteer created 3 years ago

  If you available can we do zoom meeting. So that you can check if the code is properly configured to handle token expiration, we want user to auto redirect to login page once token get expired.

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  liangshiwei created 3 years ago

  Fullstack Developer

  Can you share the full logs? (Authserver, HttpApi.Host, Web) shiwei.liang@volosoft.com

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  liangshiwei created 3 years ago

  Fullstack Developer

  Hi,

  You can try this:

  public class AccountController : ChallengeAccountController
  {
      public override Task<IActionResult> AccessDenied(string returnUrl = "", string returnUrlHash = "")
      {
          return Task.FromResult<IActionResult>(Challenge(new AuthenticationProperties { RedirectUri = GetRedirectUrl(returnUrl, returnUrlHash) }, ChallengeAuthenticationSchemas));
      }
  }
  

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  isteer created 3 years ago

  Which place need to add, have three account controller in the system as of now.

  

  Also what returnURL and returnHash need to be passed here?

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  liangshiwei created 3 years ago

  Fullstack Developer

  Hi,

  Please add the to the Web project.

  Also what returnURL and returnHash need to be passed here?

  After login it can redirect to the previous page, It is recommended that you pass parameters

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  isteer created 3 years ago

  Not able to get it correctly, In Phoneix.GTCManagement.Web Project we have empty account controller, If I add the above code it shows this error

  

  Also how this AccessDenied api will be called and from where and what to pass parameters?

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  liangshiwei created 3 years ago

  Fullstack Developer

  Hi,

  Sorry, try this:

  public class AccountController : AbpAccountImpersonationChallengeAccountController
  {
      [HttpGet]
      public Task<IActionResult> AccessDenied(string returnUrl = "", string returnUrlHash = "")
      {
          return Task.FromResult<IActionResult>(Challenge(new AuthenticationProperties()));
      }
  }
  

  Also how this AccessDenied api will be called and from where and what to pass parameters?

  This is handled by OpenIdConnectHandler:

  

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  isteer created 3 years ago

  Hello,

  Can not find OpenIdConnectHandler in the project. Can you help me to locate it?

  Thanks

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  liangshiwei created 3 years ago

  Fullstack Developer

  Hi,

  It's a class of ASPNETCore: https://github.com/dotnet/aspnetcore/blob/main/src/Security/Authentication/OpenIdConnect/src/OpenIdConnectHandler.cs

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  isteer created 3 years ago

  Okay, But as I can not relocate this class in my project, where should I add that code that you shared above.

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  liangshiwei created 3 years ago

  Fullstack Developer

  Hi,

  Also how this AccessDenied api will be called and from where and what to pass parameters?

  I just answer the question, you don't need to do it yourself.

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel

  1
• 

  0

  isteer created 3 years ago

  Okay so we just need to add in accountcontroller no need to handle openconnecthandle thing.

  

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  liangshiwei created 3 years ago

  Fullstack Developer

  yes,

  Sorry, my bad, I copied the wrong code before, please try this:

  public class AccountController : AbpAccountImpersonationChallengeAccountController
  {
      [HttpGet]
      public Task<IActionResult> AccessDenied(string returnUrl = "", string returnUrlHash = "")
      {
          return Task.FromResult<IActionResult>(Challenge(new AuthenticationProperties { RedirectUri = GetRedirectUrl(returnUrl, returnUrlHash) }, ChallengeAuthenticationSchemas));
      }
  }
  

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  isteer created 3 years ago

  Okay, only this we need to add, rest it will take care of session/token expiration right?

  I am adding this in account controller and going to deploy this to test it

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel

  1
• 

  0

  liangshiwei created 3 years ago

  Fullstack Developer

  ok

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel