user able to login even after deleting user #6006

4 Answer(s)

• 

  0

  liangshiwei created 3 years ago

  Fullstack Developer

  Hi,

  We will check it.

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  liangshiwei created 3 years ago

  Fullstack Developer

  You can track this: https://github.com/abpframework/abp/issues/17927

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  shobhit created 3 years ago

  Thanks liangshiwei. So what is the quick solution as it is big security risk for us.

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  liangshiwei created 3 years ago

  Fullstack Developer

  Hi,

  You can try :

  .....
  
  app.UseAuthentication();
  app.Use(async (httpContext, next) =>
  {
      var currentUser = httpContext.RequestServices.GetRequiredService<ICurrentUser>();
      if (currentUser.IsAuthenticated)
      {
          var userManager = httpContext.RequestServices.GetRequiredService<IdentityUserManager>();
          if (await userManager.FindByIdAsync(currentUser.Id.ToString()) == null)
          {
              await httpContext.SignOutAsync();
              httpContext.Response.Redirect("....");
              return;
          }
      }
  
      await next();
  });
  

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel