ABP RemoteService Client Proxy not passing bearer token to another appservice with dynamic client proxy #9026

richardf created one month ago

Template: app
Created ABP Studio Version: 0.8.2
Current ABP Studio Version: 0.9.25
Tiered: Yes
UI Framework: angular
Theme: leptonx
Theme Style: system
Progressive Web App: Yes
Database Provider: ef
Database Management System: mysql
Separate Tenant Schema: Yes
Mobile Framework: none
Public Website: No
Optional Modules:
- LanguageManagement
- AuditLogging
- SaaS
- OpenIddictAdmin

Exception message and full stack trace:
Steps to reproduce the issue: Need to call another app service endpoint.

From patient appservice call method in datamaintenance appservice.

so in my Patient Application module including service endpoint

protected IMedicalAidAppService MedicalAidHttpClient => LazyServiceProvider.LazyGetRequiredService<IMedicalAidAppService>();

this is defined in my datamaintenance module which the httpclient module exposes as :

public class DataMaintenanceHttpApiClientModule : AbpModule
{
    public override void ConfigureServices(ServiceConfigurationContext context)
    {
        context.Services.AddHttpClientProxies(
            typeof(DataMaintenanceApplicationContractsModule).Assembly,
            DataMaintenanceRemoteServiceConsts.RemoteServiceName
        );

In my patient app service

[DependsOn(
    typeof(PatientDomainModule),
    typeof(PatientApplicationContractsModule),
    typeof(AbpDddApplicationModule),
    typeof(AbpAutoMapperModule),
    typeof(DataMaintenanceHttpApiClientModule),
    typeof(AbpHttpClientIdentityModelModule)
    )]

and calling :

public async Task<List<DefaultCodedNameValue<string>>> GetMedicalAidsAsync()
 {
     return await MedicalAidHttpClient.GetMedicalAidsAsync().ConfigureAwait(false);
 }

this works if no [Authorize] header in data maintenance appservice otherwise getting unauthorized.

Appsettings: in patient.http:

 "Logging": {
    "LogLevel": {
      "Default": "Information",
      "Microsoft": "Warning",
      "Microsoft.Hosting.Lifetime": "Information"
    }
  },
  "RemoteServices": {
    "DataMaintenance": {
      "BaseUrl": "https://localhost:55344",
      "UseCurrentAccessToken": "true"
    }
  }
}

if I authenticate to patient it works and in datamaintenance it works, but from patient to datamaintenance unauthorized.

So the auth token has the correct bearer in patient but not being passed through.

Pls can you assist