IP Address to Allow or Block the access #8649

1 Answer(s)

• 

  0

  liangshiwei created one year ago

  Fullstack Developer

  https://abp.io/support/questions/8650/Limit-the-access-to-Application-in-MVC

  It seems to be the same issue, you can override the TokenController.Password.

  public class MyTokenController : TokenController
  {
      [UnitOfWork]
      protected override async Task<IActionResult> HandlePasswordAsync(OpenIddictRequest request)
      {
           var clientId = request.ClientId;
           var client = // get client from repository
           // check IP 
           Logger.LogInformation("IP not allowed", request.Username);
  errorDescription = "IP not allowed!";
  }
  
          var properties = new AuthenticationProperties(new Dictionary<string, string>
          {
          [OpenIddictServerAspNetCoreConstants.Properties.Error] = OpenIddictConstants.Errors.InvalidGrant,
          [OpenIddictServerAspNetCoreConstants.Properties.ErrorDescription] = errorDescription
          });
  
          return Forbid(properties, OpenIddictServerAspNetCoreDefaults.AuthenticationScheme);
      } 
  }
  

  [ExposeServices(typeof(LoginModel))]
  [Dependency(ReplaceServices = true)]
  public class MyCustomLoginModel : OpenIddictSupportedLoginModel
  {
      public MyCustomLoginModel(IAuthenticationSchemeProvider schemeProvider, IOptions<AbpAccountOptions> accountOptions, IAbpRecaptchaValidatorFactory recaptchaValidatorFactory, IAccountExternalProviderAppService accountExternalProviderAppService, ICurrentPrincipalAccessor currentPrincipalAccessor, IOptions<IdentityOptions> identityOptions, IOptionsSnapshot<reCAPTCHAOptions> reCaptchaOptions, AbpOpenIddictRequestHelper openIddictRequestHelper) : base(schemeProvider, accountOptions, recaptchaValidatorFactory, accountExternalProviderAppService, currentPrincipalAccessor, identityOptions, reCaptchaOptions, openIddictRequestHelper)
      {
      }
  
      public override async Task<IActionResult> OnGetAsync()
      {
          var openIddictRequest = await OpenIddictRequestHelper.GetFromReturnUrlAsync(base.ReturnUrl);
          var clientId = openIddictRequest.ClientId;
          
          var client = // get client from repository
          // check IP 
           Logger.LogInformation("IP not allowed", request.Username);
  errorDescription = "IP not allowed!";
          Alerts.Danger(L["IPNotAllowed"]);
          return Page();
      }
  }
  

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel