Upgrading from IdentityServer to OpenIdDict issues #6511

46 Answer(s)

• 

  0

  gterdem created one year ago

  Senior .NET Developer

  Please share the related logs of your

  • Application
  • AuthServer

  Save Cancel
• 

  0

  Dina created one year ago

  kindly check.

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  hi

  The authserver says: The specified access token is bound to an account that no longer exists.

  Does your account belong to a tenant?

  Can you share the code of AuthServer module?

  Save Cancel
• 

  0

  Dina created one year ago

  yes, the account is related to a tenant.

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  hi

  Please adjust the order of your middleware based on https://github.com/abpframework/abp/blob/dev/templates/module/aspnet-core/host/MyCompanyName.MyProjectName.AuthServer/MyProjectNameAuthServerModule.cs#L211-L233

  Save Cancel
• 

  0

  Dina created one year ago

  also there is an issue at the Public application

  

  Save Cancel
• 

  0

  Dina created one year ago

  hi

  Please adjust the order of your middleware based on https://github.com/abpframework/abp/blob/dev/templates/module/aspnet-core/host/MyCompanyName.MyProjectName.AuthServer/MyProjectNameAuthServerModule.cs#L211-L233

  is this correct?

    public override void OnApplicationInitialization(ApplicationInitializationContext context)
          {
              var app = context.GetApplicationBuilder();
              var env = context.GetEnvironment();
  
              if (env.IsDevelopment())
              {
                  app.UseDeveloperExceptionPage();
              }
  
              if (!env.IsDevelopment())
              {
                  app.UseErrorPage();
              }
  
              app.UseHttpsRedirection();
             app.UseCorrelationId();
              app.UseStaticFiles();
              app.UseRouting();
              app.UseCors();
              app.UseAuthentication();
              app.UseAbpOpenIddictValidation();
  
              if (MultiTenancyConsts.IsEnabled)
              {
                  app.UseMultiTenancy();
              }
  
             
              //app.UseJwtTokenMiddleware();
              app.UseAbpRequestLocalization(options =>
              {
                  options.RequestCultureProviders.RemoveAll(x => x.GetType() == typeof(AcceptLanguageHeaderRequestCultureProvider));
                  options.SetDefaultCulture("en-US");
              });
  
              app.UseAuditing();
              app.UseAbpSerilogEnrichers();
              app.UseConfiguredEndpoints();
  
  
              app.UseUnitOfWork();
              //app.UseIdentityServer();
  
              app.UseAuthorization();
  
              app.UseMiddleware<RedirectClientMiddleware>();            
              
          }
     
  

  Save Cancel
• 

  0

  Dina created one year ago

  same issue

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  hi

  What are the logs of the AuthServer project?

  Save Cancel
• 

  0

  Dina created one year ago

  hi

  What are the logs of the AuthServer project?

  with the tenant issue

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  hi

  ** If there are calls to app.UseRouting() and app.UseEndpoints(...), the call to app.UseAuthorization() must go between them.**

  is this correct?

  No. Please check https://github.com/abpframework/abp/blob/dev/templates/module/aspnet-core/host/MyCompanyName.MyProjectName.AuthServer/MyProjectNameAuthServerModule.cs#L211-L233

  Save Cancel
• 

  0

  Dina created one year ago

    public override void OnApplicationInitialization(ApplicationInitializationContext context)
      {
          var app = context.GetApplicationBuilder();
          var env = context.GetEnvironment();
  
          if (env.IsDevelopment())
          {
              app.UseDeveloperExceptionPage();
          }
  
          if (!env.IsDevelopment())
          {
              app.UseErrorPage();
          }
  
          app.UseHttpsRedirection();
          app.UseCorrelationId();
          app.UseStaticFiles();
          app.UseRouting();
          app.UseCors();
          app.UseAuthentication();
          
  
          app.UseAbpOpenIddictValidation();
  
          if (MultiTenancyConsts.IsEnabled)
          {
              app.UseMultiTenancy();
          }
  
         
          //app.UseJwtTokenMiddleware();
          app.UseAbpRequestLocalization(options =>
          {
              options.RequestCultureProviders.RemoveAll(x => x.GetType() == typeof(AcceptLanguageHeaderRequestCultureProvider));
              options.SetDefaultCulture("en-US");
          });
  
          app.UseAuthorization();
  
          app.UseAuditing();
          app.UseAbpSerilogEnrichers();
          app.UseConfiguredEndpoints();
  
  
          app.UseUnitOfWork();
          //app.UseIdentityServer();
  
          
  
          app.UseMiddleware<RedirectClientMiddleware>();            
          
      }
  

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  hi

  Your code is different from our template.

  https://github.com/abpframework/abp/blob/dev/templates/module/aspnet-core/host/MyCompanyName.MyProjectName.AuthServer/MyProjectNameAuthServerModule.cs#L211-L233

  https://github.com/abpframework/abp/blob/dev/templates/app/aspnet-core/src/MyCompanyName.MyProjectName.AuthServer/MyProjectNameAuthServerModule.cs#L191-L226

  The UseConfiguredEndpoints have to be the last middleware.

  Save Cancel
• 

  0

  Dina created one year ago

  and what about this line order?

  app.UseMiddleware<RedirectClientMiddleware>();

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  What is the code of RedirectClientMiddleware?

  If it will control the HTTP request it must be before UseConfiguredEndpoints

  Save Cancel
• 

  0

  Dina created one year ago

  i have reordered them

  but issue still exists

  2024-01-17 15:33:34.395 +02:00 [INF] CORS policy execution failed.
  2024-01-17 15:33:34.411 +02:00 [INF] Request origin https://localhost:44394 does not have permission to access the resource.
  2024-01-17 15:33:34.436 +02:00 [DBG] The event OpenIddict.Validation.OpenIddictValidationEvents+ProcessRequestContext was successfully processed by OpenIddict.Validation.AspNetCore.OpenIddictValidationAspNetCoreHandlers+ResolveRequestUri.
  
  

  Save Cancel
• 

  0

  Dina created one year ago

  2024-01-17 15:35:34.908 +02:00 [ERR] Exception occurred while processing message. System.Net.Http.HttpRequestException: Response status code does not indicate success: 401 (Unauthorized). at System.Net.Http.HttpResponseMessage.EnsureSuccessStatusCode() at Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectHandler.GetUserInformationAsync(OpenIdConnectMessage message, JwtSecurityToken jwt, ClaimsPrincipal principal, AuthenticationProperties properties) at Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectHandler.HandleRemoteAuthenticateAsync() 2024-01-17 15:35:34.941 +02:00 [INF] Error from RemoteAuthentication: Response status code does not indicate success: 401 (Unauthorized).. 2024-01-17 15:35:34.961 +02:00 [ERR] An unhandled exception has occurred while executing the request. System.Exception: An error was encountered while handling the remote login. ---> System.Net.Http.HttpRequestException: Response status code does not indicate success: 401 (Unauthorized). at System.Net.Http.HttpResponseMessage.EnsureSuccessStatusCode() at Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectHandler.GetUserInformationAsync(OpenIdConnectMessage message, JwtSecurityToken jwt, ClaimsPrincipal principal, AuthenticationProperties properties) at Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectHandler.HandleRemoteAuthenticateAsync() --- End of inner exception stack trace --- at Microsoft.AspNetCore.Authentication.RemoteAuthenticationHandler`1.HandleRequestAsync() at Microsoft.AspNetCore.Authentication.AuthenticationMiddleware.Invoke(HttpContext context) at Microsoft.AspNetCore.Diagnostics.DeveloperExceptionPageMiddlewareImpl.Invoke(HttpContext context)

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  hi

  Please try a host user. I think your multi-tenant middleware is not working correctly.

  What is the content of your authserver module code now?

  Save Cancel
• 

  0

  Dina created one year ago

  the host user does not have permission for the tenant, the tenant user login normally, but the issue is while redirecting to tenant dashboard

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  hi

  Please share a simple project to reproduce liming.ma@volosoft.com

  Thanks

  Save Cancel
• 

  0

  Dina created one year ago

  and this this for tenant

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  https://support.abp.io/QA/Questions/6511/Upgrading-from-IdentityServer-to-OpenIdDict-issues#answer-3a102d5b-cd53-0e52-33f1-dc93f1ca8c88

  Save Cancel
• 

  0

  Dina created one year ago

  https://support.abp.io/QA/Questions/6511/Upgrading-from-IdentityServer-to-OpenIdDict-issues#answer-3a102d5b-cd53-0e52-33f1-dc93f1ca8c88

  it is difficult for me to create another simple one as the project is big and has a lot of modules, projects and configurations!!

  Please let me know what classes or configurations should i check due to the sent logs.

  Save Cancel
• 

  0

  Dina created one year ago

  also there is an issue at the Public application

  

  also, there is a similar issue with the public application as mentioned above.

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  hi

  Please share full code of Maw3idIdentityServerModule to liming.ma@volosoft.com

  Save Cancel