0
portx-dev created
- ABP Framework version: v8.3.3
- UI Type: Angular
- Database System: EF Core (My SQL)
- Tiered (for MVC) or Auth Server Separated (for Angular): yes
- Exception message and full stack trace:
- Steps to reproduce the issue:
- 1. Set Access Token Lifetime:
- Configure the AccessTokenLifetime in your ABP (ASP.NET Core) back-end application to a short duration, such as 2 minutes. This can typically be done in the configuration settings or startup configuration for your authentication options.
- 2. Open Multiple Tabs:
- Launch your Angular application and open it in multiple browser tabs.
- Ensure that all tabs are authenticated using the same session (i.e., logged in with the same user account)
- 3. Wait for Token Expiry:
- Wait for the access token to expire after the 2-minute lifetime.
- Once the token expires, a Refresh Token process should be initiated in one or more tabs to acquire a new access token.
- 4. Observe the Behavior:
- Notice that when the refresh token request completes, all the open tabs are reloaded, which might disrupt the user experience.
- This behavior can be unexpected, and understanding why all tabs reload when one tab initiates the refresh process is critical. This could be related to how the token management or session synchronization is handled across tabs in the ABP framework.
- After the reload, observe that some screens are redirected to a 403 (Forbidden) page. This may indicate that certain state or authorization checks failed after the token refresh, leading to restricted access on those screens
- 1. Set Access Token Lifetime:
3 Answer(s)
-
0
Hello ,
Can you check this docuemnt If it is helpful to resolve your issue https://github.com/abpframework/abp/issues/15530
Thank you.
-
0
I saw that the problem was reported to be fixed in v7.3. However, I am using v8.3.3. I tried downgrading to v8.2.2, and the problem disappeared. Please check this issue.
-
0