OpenIdConnect redirection issue #8731

115 Answer(s)

• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  Thanks. If your project is complicated, you can test your code in a template project and share the template source code.

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  SharmaAtul created one year ago

  Thanks. If your project is complicated, you can test your code in a template project and share the template source code.

  I purchased the mvc project from the ABP.IO.

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  Ok, waiting for your project. Thanks

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  SharmaAtul created one year ago

  Ok I have sent you an email with project. As project size was larger after compress so you will get google drive link for download in the email.

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  Your project works for me.

  

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  SharmaAtul created one year ago

  but why it is not showing to me? Is it available only for Host?

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  SharmaAtul created one year ago

  Also what are the changes you applied?

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  The code of ConfigureAuthentication

  private void ConfigureAuthentication(ServiceConfigurationContext context, IConfiguration configuration)
  {
      context.Services.AddAuthentication().AddOpenIdConnect(options =>
      {
          options.ClientId = configuration["Authentication:AzureAd:ClientId"];
          options.ClientSecret = configuration["Authentication:AzureAd:ClientSecret"];
          options.Authority = configuration["Authentication:AzureAd:Authority"];
          options.CallbackPath = configuration["Authentication:AzureAd:CallbackPath"];
          options.ResponseType = OpenIdConnectResponseType.Code;
          options.SaveTokens = true;
          //options.Scope.Clear();
          options.Scope.Add("openid");
          options.Scope.Add("profile");
          options.Scope.Add("email");
          //options.Scope.Add("offline_access");
  
          options.Events = new OpenIdConnectEvents
          {
              OnTokenValidated = async context =>
              {
                  var claimsIdentity = (ClaimsIdentity) context.Principal.Identity;
                  Console.WriteLine("User authenticated: " + claimsIdentity.Name);
              },
              OnRedirectToIdentityProvider = context =>
              {
                  Console.WriteLine("Redirecting to Identity Provider...");
                  return Task.CompletedTask;
              }
          };
      });
  
      // Add authentication using Azure AD
      //context.Services.AddAuthentication(options =>
      //{
      //    options.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
      //    options.DefaultChallengeScheme = OpenIdConnectDefaults.AuthenticationScheme;
      //})
      //.AddOpenIdConnect(options =>
      //{
      //    options.ClientId = configuration["Authentication:AzureAd:ClientId"];
      //    options.ClientSecret = configuration["Authentication:AzureAd:ClientSecret"];
      //    options.Authority = configuration["Authentication:AzureAd:Authority"];
      //    options.CallbackPath = configuration["Authentication:AzureAd:CallbackPath"];
      //    options.ResponseType = OpenIdConnectResponseType.Code;
      //    options.SaveTokens = true;
      //    //options.Scope.Clear();
      //    options.Scope.Add("openid");
      //    options.Scope.Add("profile");
      //    options.Scope.Add("email");
      //    //options.Scope.Add("offline_access");
  
      //    options.Events = new OpenIdConnectEvents
      //    {
      //        OnTokenValidated = async context =>
      //        {
      //            var claimsIdentity = (ClaimsIdentity)context.Principal.Identity;
      //            Console.WriteLine("User authenticated: " + claimsIdentity.Name);
      //        },
      //        OnRedirectToIdentityProvider = context =>
      //        {
      //            Console.WriteLine("Redirecting to Identity Provider...");
      //            return Task.CompletedTask;
      //        }
      //    };
      //})
      //.AddCookie(CookieAuthenticationDefaults.AuthenticationScheme, options =>
      //{
      //    options.Cookie.HttpOnly = true;
      //    options.Cookie.SameSite = SameSiteMode.Strict;  // Adjust based on your requirements
  
      //    options.Events = new CookieAuthenticationEvents
      //    {
      //        OnSigningIn = context =>
      //        {
      //            Console.WriteLine("Signing in user...");
      //            return Task.CompletedTask;
      //        },
      //        OnSignedIn = context =>
      //        {
      //            Console.WriteLine("User signed in: " + context.Principal.Identity.Name);
      //            return Task.CompletedTask;
      //        },
      //        OnSigningOut = context =>
      //        {
      //            Console.WriteLine("Signing out user...");
      //            return Task.CompletedTask;
      //        }
      //    };
      //});
  
      context.Services.ForwardIdentityAuthenticationForBearer(OpenIddictValidationAspNetCoreDefaults.AuthenticationScheme);
      context.Services.Configure<AbpClaimsPrincipalFactoryOptions>(options =>
      {
          options.IsDynamicClaimsEnabled = true;
      });
  }
  

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  SharmaAtul created one year ago

  Ok let me try with the code you provided.

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  SharmaAtul created one year ago

  Ok it worked for me as well. After that when i clicked on the OpenIdConnect then I got this

  

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  Please share a test user of https://login.microsoftonline.com/

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  SharmaAtul created one year ago

  Please share a test user of https://login.microsoftonline.com/ Username : sharma.atul19@outlook.com Password : atul8outlook

  Also when I got the access denied page and click on the Back to login then host selection will be hidden.

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  On your mobile device, approve request CBOC1

  Please create a new test user.

  Thanks.

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  SharmaAtul created one year ago

  Are you getting any error with the user provided?

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  no. I'm trying to log in by Microsoft account, Please create a new test user.

  I will test your account with your app tomorrow

  Thanks.

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  SharmaAtul created one year ago

  Ok I will share the details and Also If I register a user with OpenIdConnect then what will be the default role?

  Also, how to set default role to the user?

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  If the role is set as default. The new user will have all of default roles.

  Please share your test user with liming.ma@volosoft.com

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  SharmaAtul created one year ago

  Hi, I have added a user in our AD with the email liming.ma@volosoft.com, kindly check and confirm if you have received the invitation.

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  hi

  See the video: https://streamable.com/6uxolk

  I can sign in by microsoft account and get username and email then register a new user.

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  If you want to change the default user roles.

  You can change the code of RegisterExternalUserAsync method of modules/Volo.Abp.Account.Pro/src/Volo.Abp.Account.Pro.Public.Web/Pages/Account/Register.cshtml.cs

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  SharmaAtul created one year ago

  Ok I will check and let you know.

  Thanks.

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  ok

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  SharmaAtul created one year ago

  Ok it is working now for me.

  Also, Instead of going to login page, select tenant and click on openIdConnect, I want to directly open the Microsoft login screen and how we will use tenant selection screen?

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  maliming created one year ago

  Support Team Fullstack Developer

  hi

  Replace MyTenant with your tenant name.

  __tenant=MyTenant

  public async Task<IActionResult> OnGetAsync()
  {
      if (!CurrentUser.IsAuthenticated)
      {
          var provider = "OpenIdConnect";
          var redirectUrl = "/Account/Login?handler=ExternalLoginCallback&__tenant=MyTenant";
          var properties = SignInManager.ConfigureExternalAuthenticationProperties(provider, redirectUrl);
          properties.Items["scheme"] = provider;
          return Challenge(properties, provider);
      }
  
      return Page();
  }
  

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  SharmaAtul created one year ago

  Hi I want to connect tenant specific active directory, So how do i do that?

  Can you please suggest any solution about it?

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel