Open Closed

Auth server dynamic claims fails - somehow token is not passed from another MVC web app?! #9443


User avatar
0
nachi created

Context: I've gone through the modular monolith documentation and in our unique project requirements, we have done this, we created an abp tiered /postgresql (prime_core) solution with all abp modules + MVC app + Auth server. Now the MVC app kinda acts as an admin UI to all abp modules. We also created an angular app for public facing site. Now for the developers involved in each module, we went ahead to create a separate tiered/postgresql solution + MVC app. Then in here, we modified the ef framework connection strings to use prime_core db for all abp modules' data calls. The idea is all abp module will have direct db calls to prime_core db. whereas for this module's entities, we created prime_<module_name> db. Overall every module will have their own databases and for abp modules look to prime_core db.

Problem: As this new module abp solution's MVC app was run against the auth server, authentication works but fails at this call api : https://localhost:44366/api/account/dynamic-claims/refresh and ultimately fails to authenticate and proceed. Add on question: is our approach to avoid full-blown microservice with attached image works good from a abp solution perspective. we need every developer to have their own full solution, admin screens and deploy/test independently and generic angular app take the APIs from these deployed sites. Will permissions/language/distributed events/signalr hub works in this architecture. Refer to 04-final.drawio.pdf

Exception Message and full stack trace: refer to 184 to 219 in the attached authserver-logs.txt Also attached the authserver side logs: webserver-logs.txt

Steps to Reproduce: Create a abp solution : Ldr.Prime.Core (check the attached abp file - abp-solution-prime_Core.txt), you can use local postgresql Create another abp solution Ldr.Prime.Case (check the attached abp file - abp-solution-prime_Case.txt). Modify the appsettings to point to 1st solution Auth server & Remote services + point to a common azure postgresql server and azure redis server, ensure entries are in there in prime_core db for OpenIddictApplications and other tables. Also attached the zip file for both the solutions stripping of sensitive data - Ldr.Prime.CoreAndCase-abpsolutions.zip

Now run the 1st abp solution projects via dotnet run - Web, Http.Host and Auth Server Next run the 2nd abp solution Web project, authenticate via auth server, redirection fails with proper user logged in

All attachments refereed above in google drive https://drive.google.com/drive/folders/1FhCkST09CRyvHky5V2HnYMPePx0LUqcU?usp=sharing


2 Answer(s)
  • User Avatar
    0
    berkansasmaz created
    Support Team .NET Developer

    Hello, I downloaded your solution and noticed that your NuGet API key and other sensitive information are publicly exposed. I kindly recommend that you delete the solution from your drive immediately to protect your data.

  • User Avatar
    0
    berkansasmaz created
    Support Team .NET Developer

    Hello, I tried to reproduce the problem with the application you provided, but when I added the relevant scope and client, I was able to log in successfully. You can find the screenshot below:


    Below you can find the information of the scope and client I added:

Boost Your Development
ABP Live Training
Packages
See Trainings
Mastering ABP Framework Book
The Official Guide
Mastering
ABP Framework
Learn More
Mastering ABP Framework Book
Made with ❤️ on ABP v9.3.0-preview. Updated on June 13, 2025, 11:37