Open Closed

9.0.4 -> 9.2.3 upgrade #9707


User avatar
1
sghorakavi@cpat.com created
  • Steps to reproduce the issueTenant subdomain logout is not working. Tenant stays logged in always:

116 Answer(s)
  • User Avatar
    0
    sghorakavi@cpat.com created

    I will try to publish. When tenant login happens following lines are missing. How can I add that ?

    ** [Debug] Executing AbpApplicationConfigurationAppService.GetAsync()... [Debug] Executed AbpApplicationConfigurationAppService.GetAsync()." During tenant login**

    Thank you

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    hi

    I will wait to test online websites. Then I will find the reason. Thanks

  • User Avatar
    0
    sghorakavi@cpat.com created

    Pushed to web, pls check. https://dev.approach.cpat.dev and https://cpattest.dev.approach.cpat.dev

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    hi

    I have reproduced the 400 error.

    Please share all logs.

    liming.ma@volosoft.com

    Thanks

  • User Avatar
    0
    sghorakavi@cpat.com created

    pls check your email, sent you logs. Thank you

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    hi

    I didn't receive your logs.

    Can you share it via https://wetransfer.com/

    Thanks.

  • User Avatar
    0
    sghorakavi@cpat.com created

    sent you

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    Hi

    Can you sent it to malimings@gmail.com

    I still haven’t received it.

    Thanks

  • User Avatar
    0
    sghorakavi@cpat.com created

    done, pls check

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    hi

    the 400 error

    Checking wildcard domain for url: http://cpattest.dev.approach.cpat.dev/signout-callback-oidc
    Checking wildcard domain format: https://*.auth.approach.cpat.dev/
    Checking wildcard domain format: https://*.dev.approach.cpat.dev/signin-oidc
    Checking wildcard domain format: https://*.dev.approach.cpat.dev/signout-callback-oidc
    No wildcard domain found for url: http://cpattest.dev.approach.cpat.dev/signout-callback-oidc
    
    The end session request was rejected because the specified post_logout_redirect_uri was invalid: http://cpattest.dev.approach.cpat.dev/signout-callback-oidc.
    

    Please add http://cpattest.dev.approach.cpat.dev/signout-callback-oidc to your TMS_MVC_Web's post_logout_redirect_uri

    Thanks.

  • User Avatar
    0
    sghorakavi@cpat.com created

    Thank you, I do not see code for post_logout_redirect_uri. Where should I add it ?

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    hi

    You can check your OpenIddictDataSeedContributor file.

  • User Avatar
    0
    sghorakavi@cpat.com created

    yup root url in domain does not have wild card. Let me add wildcard and retry .. ?

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    ok

  • User Avatar
    0
    sghorakavi@cpat.com created

    I will ping you as soon as code is deployed to web today. Note: On my development computer, I cannot duplicate the 400 error. We might still have original issue related to logout tenant. I will send you update. Thank you very much

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    ok, no problem.

  • User Avatar
    0
    sghorakavi@cpat.com created

    Noticed one issue: When tenant got created, we are not running CreateApplicationsAsync with wildcard root url. i.e. above code is not getting executed for new tenant. That might be causing logout not to happen for tenant. I will send you link once published.

  • User Avatar
    0
    sghorakavi@cpat.com created

    You have postLogoutRedirectUris which is List but I have postLogoutRedirectUri string. Will that make the difference? Still failing to login or logout

    Please check. https://auth.approach.cpat.dev/

    await CreateApplicationAsync(
         applicationType: OpenIddictConstants.ApplicationTypes.Web,
         name: webClientId!,
         type: OpenIddictConstants.ClientTypes.Confidential,
         consentType: OpenIddictConstants.ConsentTypes.Implicit,
         displayName: "Web Application",
         secret: configurationSection["TMS_MVC_Web:ClientSecret"] ?? "1q2w3e*",
         grantTypes: new List<string> //Hybrid flow
         {
             OpenIddictConstants.GrantTypes.AuthorizationCode, OpenIddictConstants.GrantTypes.Implicit
         },
         scopes: commonScopes,
         redirectUri: $"{webClientRootUrl}signin-oidc",
         postLogoutRedirectUri: $"{webClientRootUrl}signout-callback-oidc",
         clientUri: webClientRootUrl,
         logoUri: "/images/clients/aspnetcore.svg"
     );
    
  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    hi

    Please check the OpenIddictApplications table

  • User Avatar
    0
    sghorakavi@cpat.com created

    It is like : `select [PostLogoutRedirectUris] FROM [TMS_MVC].[dbo].[OpenIddictApplications] where ClientId = 'TMS_MVC_Web'

    Output: "[https://auth.cpat.com:44346/signout-callback-oidc"]`

    We use same DB for all tenants.

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    hi

    You can try to update PostLogoutRedirectUris as

    ["https://auth.cpat.com:44346/signout-callback-oidc", "http://cpattest.dev.approach.cpat.dev/signout-callback-oidc"]

    You can also update the PostLogoutRedirectUris in UI page.

    Checking wildcard domain for url: http://cpattest.dev.approach.cpat.dev/signout-callback-oidc
    Checking wildcard domain format: https://*.auth.approach.cpat.dev/
    Checking wildcard domain format: https://*.dev.approach.cpat.dev/signin-oidc
    Checking wildcard domain format: https://*.dev.approach.cpat.dev/signout-callback-oidc
    No wildcard domain found for url: http://cpattest.dev.approach.cpat.dev/signout-callback-oidc
    
    The end session request was rejected because the specified post_logout_redirect_uri was invalid: http://cpattest.dev.approach.cpat.dev/signout-callback-oidc.
    
  • User Avatar
    0
    sghorakavi@cpat.com created

    Let me try

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    OK, remember to clear Redis if you use it.

    You can continue to share the logs.

    Thanks

  • User Avatar
    0
    sghorakavi@cpat.com created

    I have updated sql table manually in the deployed web site that you can access. Now the deployed code is in the docker, I will work with devOps team to clear redis cache tomorrow and will send you updated logs.

    Note: When tenant is created with 9.0.4 version, we had "SaasDataSeedContributor : IDataSeedContributor, ITransientDependency" But that does not get called in 9.2.3 So, I tried to add TenantCreatedEventHandler to update the table, it is not working. I am just trying this locally on my development computer. I have not deployed this code yet.

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    hi

    The websites are 500 error now

    500 Internal Server Error An internal error occurred during your request!

Boost Your Development
ABP Live Training
Packages
See Trainings
Mastering ABP Framework Book
The Official Guide
Mastering
ABP Framework
Learn More
Mastering ABP Framework Book
Made with ❤️ on ABP v10.1.0-preview. Updated on December 08, 2025, 08:24
1
ABP Assistant
🔐 You need to be logged in to use the chatbot. Please log in first.