Volo.Abp.BusinessException occuring when turning on 2FA for a user #8928

17 Answer(s)

• 

  0

  balessi75 created 12 days ago

  

  Save Cancel
• 

  0

  maliming created 9 days ago

  Support Team Fullstack Developer

  hi

  I will hide the 2FA menu from user dropbox if the current behavior is Forced,

  or show the message details: It's not allowed to change two factor setting.

  Thanks.

  Save Cancel
• 

  0

  maliming created 9 days ago

  Support Team Fullstack Developer

  hi

  We have fixed this in 9.0 version

  Here is the changes:

  

  

  Save Cancel
• 

  0

  balessi75 created 9 days ago

  Thanks.

  If I change the tenant's 2FA setting to 'Forced', the user cannot turn on/off their 2FA under their profile which makes sense. but if the user had 2FA turned off on their profile and the tenant setting is now set to 'Forced', shouldn't the user have to perform 2fa to login in? This user has a 2fa provider setup for email.

  In order to make this work, we had to set the tenant 2FA setting back to 'Optional' then turn on 2FA for the user, then set the tenant back to 'Forced'

  Is there something we are missing here? shouldn't all users be required to do 2fa if it is setup as 'Forced' on the tenant level (regardless of what the setting is on the user level)?

  Save Cancel
• 

  0

  maliming created 9 days ago

  Support Team Fullstack Developer

  hi

  If you set 2FA to Forced, The system will assume all users have 2FA enabled, but they need to configure at least one valid 2FA provider. eg: email. SMS, authenticator.

  Save Cancel
• 

  0

  balessi75 created 9 days ago

  in our system all users self-register and when the tenant is set to have 2fa Forced, all newly registered users get created with 2fa turned off, so in essence 2fa is never forced. so this means an admin has to manually visit each user to turn on 2fa?

  Additionally, in our system all users will always have a verified email for use in 2fa.

  Save Cancel
• 

  0

  maliming created 9 days ago

  Support Team Fullstack Developer

  hi

  Does your system user have at least one valid 2FA provider? eg they confirmed their email address.

  I think if they have. After setting 2FA to Force, every user must log in with 2FA.

  Save Cancel
• 

  0

  balessi75 created 9 days ago

  Yes, every user has a confirmed email, but 2fa isn't enforced because its turned off at the user level.

  Save Cancel
• 

  0

  maliming created 9 days ago

  Support Team Fullstack Developer

  hi

  Can you test it in a new template project?

  I have checked the source code. the logic is no problem

  

  Save Cancel
• 

  0

  balessi75 created 9 days ago

  I'm trying to create a new project from the template and I'm getting the following when clicking on the login link.. I already ran yarn and abp install-libs from the solution folder.

  An unhandled exception occurred while processing the request.
  AbpException: Could not find the bundle file '/libs/bootstrap/js/bootstrap.enable.tooltips.everywhere.js' for the bundle 'Lepton.Global'!
  Volo.Abp.AspNetCore.Mvc.UI.Bundling.TagHelpers.AbpTagHelperResourceService.ProcessAsync(ViewContext viewContext, TagHelper tagHelper, TagHelperContext context, TagHelperOutput output, List<BundleTagHelperItem> bundleItems, string bundleName)

  Save Cancel
• 

  0

  maliming created 9 days ago

  Support Team Fullstack Developer

  What is your project package version? abp and leptonx?

  Did you use Studio to create the new project?

  Thanks

  Save Cancel
• 

  0

  balessi75 created 9 days ago

  I used abp suite to create the application it is using Lepton theme at version 7.2.1. I ran install-libs from the ProjectName.Blazor folder.

  {
    "version": "1.0.0",
    "name": "my-app",
    "private": true,
    "dependencies": {
      "@volo/abp.aspnetcore.components.server.leptontheme": "7.2.1",
      "@volo/abp.aspnetcore.mvc.ui.theme.lepton": "7.2.1",
      "@volo/account": "~7.2.1",
      "@volo/cms-kit-pro.admin": "~7.2.1",
      "@volo/language-management": "~7.2.1"
    }
  }
  
  

  Save Cancel
• 

  0

  maliming created 9 days ago

  Support Team Fullstack Developer

  hi

  Please share your project with liming.ma@volosoft.com

  I will download and check it.

  Thanks.

  Save Cancel
• 

  0

  balessi75 created 9 days ago

  Hi

  I emailed you a link to the project solution.

  Save Cancel
• 

  0

  balessi75 created 9 days ago

  Hi,

  I was able to get the template solution to work and found that I could not replicate the two factor issue. So it is unclear to me why we are seeing the issue in our solution.

  To debug, I overrode GetTwoFactorEnabledAsync in the IdentityProUserStore and found that when it runs, it correctly returns true because the tenant's 2fa setting is set to forced.

  Our override to the login process relative to 2fa is not changed from the original ABP implementation...

          var result = await SignInManager.PasswordSignInAsync(
              LoginInput.UserNameOrEmailAddress,
              LoginInput.Password,
              LoginInput.RememberMe,
              true
          );
  
          await IdentitySecurityLogManager.SaveAsync(new IdentitySecurityLogContext
          {
              Identity = IdentitySecurityLogIdentityConsts.Identity,
              Action = result.ToIdentitySecurityLogAction(),
              UserName = LoginInput.UserNameOrEmailAddress
          });
  
          if (result.RequiresTwoFactor)
          {
              return RedirectToPage("./SendSecurityCode", new {
                  returnUrl = ReturnUrl,
                  returnUrlHash = ReturnUrlHash,
                  rememberMe = LoginInput.RememberMe,
                  linkUserId = LinkUserId,
                  linkTenantId = LinkTenantId,
                  linkToken = LinkToken
              });
          }
  

  result.RequiresTwoFactor returned from await SignInManager.PasswordSignInAsync returns false.

  Save Cancel
• 

  0

  balessi75 created 9 days ago

  Thank you for your help maliming.

  Once I cleared my cookies everything worked as expected.

  Save Cancel
• 

  0

  maliming created 9 days ago

  Support Team Fullstack Developer

  Great

  Save Cancel