Token Authentication #5253

10 Answer(s)

• 

  0

  liangshiwei created one year ago

  Support Team Fullstack Developer

  HI,

  Can you explain it in detail? thanks.

  Save Cancel
• 

  0

  in4tek.abp created one year ago

  Hi, I logged into my abp application with Microsoft account; now, I would like to embed PowerBI Dashboard, but to do this I need to have a Token to pass to PowerBI. I can't intercept the token... How can I do it? Thank you

  Save Cancel
• 

  0

  liangshiwei created one year ago

  Support Team Fullstack Developer

  Hi,

  You can try :

  .AddMicrosoftAccount(MicrosoftAccountDefaults.AuthenticationScheme, options =>
  {
      //Personal Microsoft accounts as an example.
      options.AuthorizationEndpoint = "https://login.microsoftonline.com/consumers/oauth2/v2.0/authorize";
      options.TokenEndpoint = "https://login.microsoftonline.com/consumers/oauth2/v2.0/token";
      options.Events.OnCreatingTicket = ticketContext =>
      {
          ticketContext.Identity.AddClaim(new Claim("urn:microsoftaccount:access_token", ticketContext.AccessToken));
          return  Task.CompletedTask;
      };
      
  })
  

  Azure access token is added to the claim

  Save Cancel
• 

  0

  in4tek.abp created one year ago

  Thank you so much Now, I would to have the token in Controller or Service, but when I look into the "CurrentUser", after Microsoft Login to retireve Claims, it's Empty. What is the best practice to do this? The Token is necessary to call PowerBI Dashboard, thank you.

  Save Cancel
• 

  0

  liangshiwei created one year ago

  Support Team Fullstack Developer

  You can set the SaveTokens to true:

  .AddMicrosoftAccount(MicrosoftAccountDefaults.AuthenticationScheme, options =>
  {
      //Personal Microsoft accounts as an example.
      options.AuthorizationEndpoint = "https://login.microsoftonline.com/consumers/oauth2/v2.0/authorize";
      options.TokenEndpoint = "https://login.microsoftonline.com/consumers/oauth2/v2.0/token";
      
      options.SaveTokens = true;    
  
      options.Events.OnCreatingTicket = ticketContext =>
      {
          ticketContext.Identity.AddClaim(new Claim("urn:microsoftaccount:access_token", ticketContext.AccessToken));
          return  Task.CompletedTask;
      };
      
  })
  

  HttpContext.GetTokenAsync(scheme: MicrosoftAccountDefaults.AuthenticationScheme,"access_token");
  

  Save Cancel

  1
• 

  0

  in4tek.abp created one year ago

  Thank you liangshiwei. Last question... is there a link where it is explain embedding PowerBI in angular abp application? With API calls, of course. tnx

  Save Cancel
• 

  0

  liangshiwei created one year ago

  Support Team Fullstack Developer

  Hi,

  I think this is not related to ABP, I'm not a PowerBI expert.

  You can check those:

  • https://github.com/microsoft/powerbi-client-angular
  • https://learn.microsoft.com/en-us/javascript/api/overview/powerbi/powerbi-client-angular

  Save Cancel

  1
• 

  0

  in4tek.abp created one year ago

  You can set the SaveTokens to true:

  .AddMicrosoftAccount(MicrosoftAccountDefaults.AuthenticationScheme, options => 
  { 
      //Personal Microsoft accounts as an example. 
      options.AuthorizationEndpoint = "https://login.microsoftonline.com/consumers/oauth2/v2.0/authorize"; 
      options.TokenEndpoint = "https://login.microsoftonline.com/consumers/oauth2/v2.0/token"; 
       
      options.SaveTokens = true;     
   
      options.Events.OnCreatingTicket = ticketContext => 
      { 
          ticketContext.Identity.AddClaim(new Claim("urn:microsoftaccount:access_token", ticketContext.AccessToken)); 
          return  Task.CompletedTask; 
      }; 
       
  }) 
  

  HttpContext.GetTokenAsync(scheme: MicrosoftAccountDefaults.AuthenticationScheme,"access_token"); 
  

  Hi, I added this code in my application, but whe i check into the httpContext to find the value of token, it's empty I must have its value available in the controller Thank you

  Save Cancel
• 

  0

  liangshiwei created one year ago

  Support Team Fullstack Developer

  Hi,

  Please try:

  using IdentityUser = Volo.Abp.Identity.IdentityUser;
  
  [Dependency(ServiceLifetime.Transient, ReplaceServices = true)]
  [ExposeServices(typeof(SignInManager<IdentityUser>))]
  public class MySignInManager : SignInManager<IdentityUser>
  {
      public MySignInManager(Microsoft.AspNetCore.Identity.UserManager<IdentityUser> userManager,
          IHttpContextAccessor contextAccessor,
          Microsoft.AspNetCore.Identity.IUserClaimsPrincipalFactory<IdentityUser> claimsFactory,
          IOptions<IdentityOptions> optionsAccessor, ILogger<SignInManager<IdentityUser>> logger,
          IAuthenticationSchemeProvider schemes, IUserConfirmation<IdentityUser> confirmation) : base(userManager,
          contextAccessor, claimsFactory, optionsAccessor, logger, schemes, confirmation)
      {
      }
  
      public override async Task SignInAsync(IdentityUser user, AuthenticationProperties authenticationProperties,
          string authenticationMethod = null)
      {
          if (authenticationMethod == "AzureOpenId") // is github external login
          {
              var githubAuthenticateResult = await Context.AuthenticateAsync(IdentityConstants.ExternalScheme);
              if (githubAuthenticateResult.Succeeded)
              {
                  if (githubAuthenticateResult.Properties != null)
                  {
                      authenticationProperties.StoreTokens(githubAuthenticateResult.Properties.GetTokens());
                  }
              }
          }
  
          await base.SignInAsync(user, authenticationProperties, authenticationMethod);
      }
  }
  

  var accessToken = await HttpContext.GetTokenAsync( OpenIdConnectParameterNames.AccessToken);
  

  Save Cancel
• 

  0

  liangshiwei created one year ago

  Support Team Fullstack Developer

  AzureAD config:

  context.Services.AddAuthentication()
  .AddOpenIdConnect("AzureOpenId", "Azure AD OpenId", options =>
  {
      options.Authority = "https://login.microsoftonline.com/" + configuration["AzureAd:TenantId"] + "/v2.0/";
      options.ClientId = configuration["AzureAd:ClientId"];
      options.ResponseType = OpenIdConnectResponseType.CodeIdToken;
      options.CallbackPath = configuration["AzureAd:CallbackPath"];
      options.ClientSecret = configuration["AzureAd:ClientSecret"];
      options.RequireHttpsMetadata = false;
      options.SaveTokens = true;
      options.GetClaimsFromUserInfoEndpoint = true;
      options.Scope.Add("email");
      options.ClaimActions.MapJsonKey(ClaimTypes.NameIdentifier, "sub");
    
  })
  

  Save Cancel