Hello, we noticed that when demote/change the role of someone, it doesn't get reflected instantly. we figured it's because caching. but we thought UseDynamicClaims covered that case.
We don't want an admin that we demote to a simple guest to still have admin powers for an hour and thought it should be working out of the box.
This is issue is noticeable in our blazor app and our maui blazor hybrid mobile app.
We tried adding a middleware in identity service to replace the claims by the current role claims but it didn't work.
Do you have any suggestions?
13 Answer(s)
-
0
yes done that, same issue
Reproduction Steps:
- Create a new microservice solution.
- Create a new tenant.
- Log in as the tenant admin.
- Create a new role called "Guest".
- Create a user named "TestUser" and assign the "Admin" role.
- Open an incognito browser and log in as TestUser.
- Confirm that TestUser has admin privileges — ✅ expected.
- Log out TestUser.
- As admin, modify TestUser’s role to "Guest" (remove admin role).
- Log in again as TestUser (in incognito).
- TestUser still has admin privileges — ❌ unexpected.
Expected Behavior:
After logging out and back in, TestUser should have Guest permissions only, with admin privileges revoked. According to the ABP documentation, role changes should take effect at the next request or at least after reauthentication. For us it doesn't even work with a logout/login
Actual Behavior:
Role changes are not applied even after logout/login. It seems role claims are cached or not refreshed properly.
Only solution we found right now is creating a redis cache service and deleting user cache (not ideal)..
Markdown supported.Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post) -
0
yes it works.. thank you. I guess it's a template issue then?
Markdown supported.Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post) -
0
hi
Instead of adding
AbpIdentityProEntityFrameworkCoreModule in AdministrationServiceCan you try to configure the
WebRemoteDynamicClaimsPrincipalContributorOptionsinAdministrationService?Thanks.
public override void PreConfigureServices(ServiceConfigurationContext context) { PreConfigure<WebRemoteDynamicClaimsPrincipalContributorOptions>(options => { options.IsEnabled = true; }); }Also please depends on the
typeof(AbpAspNetCoreAuthenticationJwtBearerModule)inAdministrationService.Markdown supported.Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post) -
0
Hi!
tried the new proposed solution, doesn't work on our Blazor Web app. both proposed solutions also don't work for our MAUI Blazor hybrid mobile app.
We need the dynamic claims to also work on mobile app.
Thank you
Markdown supported.Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post) -
0
yes I did
Markdown supported.Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post) -
0
But I couldn't reproduce the problem in a new microservice template after configuring
WebRemoteDynamicClaimsPrincipalContributorOptions.The dynamic claims works.
Markdown supported.Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post) -
0
results on our end:
- Blazor web app : works fine
- MAUI Blazor hybrid app : works fine locally / when deployed on the android-apple stores, doesn't work.
We are gonna try a custom solution to clear redis cache of user because we have no time dealing with this..
Our Redis cache solution works
Markdown supported.Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post) -
0
hi
MAUI Blazor hybrid app : works fine locally / when deployed on the android-apple stores, doesn't work.
If you refresh the maui page. Does it works?
We recently added a
MauiCurrentApplicationConfigurationCacheResetService. Can you try to add it to your Maui project and override theMauiBlazorCachedApplicationConfigurationClient?https://github.com/abpframework/abp/pull/22866/files
Thanks.
Markdown supported.Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
