password page, it is due to the browser trying to re-execute a POST request.

This is a standard browser behavior when navigating back to a page that was the result of a form submission

GET page (such as a confirmation or the login page).

This way, if the user navigates back, the browser will only re-request the GET page, not the POST, and

/ForgotPasswordConfirmation"); } ``` This approach ensures that after a POST, the user is always redirected

When users click on the browser back button from the forgot password page, they see the resubmission

[image.png](/QA/files/3a1c9ece96fbd43ba3d6e6c8b9d0bf46.png) However, when they click on the Login

button, they get navigated back to the main login page

If nothing happens or you see a blank page, this is usually due to a misconfiguration in the authentication

**Check AuthServer is Running:** - Ensure the AuthServer (or IdentityServer) project is running

**If you see a blank page or nothing happens:** - It usually means the Angular app cannot reach the

AuthServer, or the OAuth config is incorrect.

hi The error is `The token request was rejected because invalid scopes were specified: ["ManagementService

*: Yes - **Kubernetes Configuration**: Yes - **Grafana Dashboard**: Yes - **Use Local References**: No

- **Aspire**: No - **Optional Modules**: * GDPR * TextTemplateManagement * AuditLogging * OpenIddictAdmin

postgresql --theme leptonx --skip-migrator --public-website --without-cms-kit --dont-run-bundling -no-file-management

-no-language-management Hello again.

hi What is your project abp package version?

or the admin user.

This issue can occur if: - The permission seeding logic is not executed for tenants created via external

- The seeding should run for every new tenant, regardless of how the tenant is created (UI, Swagger

or custom logic, make sure it does not interfere with the default role/permission assignment. ### Example

When creating a new tenant via the ABP Tenant Management API (POST /api/tenant-management/tenants) from

However, after logging in as the newly created admin user, the user is unable to create additional users

the API is called externally (e.g., from Postman, another service, or automated script), even though

the same call works correctly when made via Swagger or ABP UI.

**here is the example payload we are passing from other abp application** { "name": "Tenant30"

Permission Issue 403 While creating tenant user from identity user module

This is a known challenge when the claims principal is populated with a very large number of organization

If we understand correctly you mean to say the issue is with EF while fetching and tracking the table

with 5k + records and no issue with claims?

I have added the noTracking but still no luck, same code is pushed to that code. !

Thanks with this it worked, just would like to know is there any way to set the no tracking for all

" (we have around 1500 Locations) and all of he locations is mapped to the users "AbpUserOrganizationUnits

upgrading to Abp9 we found lot time it is taking top process the below code, around 3 minutes hence

getting the timeout as well !

3a1c9775046a663fd8d8a1461b1934d3.png) In order top check this We have created a simple layered solution, and loaded with

This is very critial and makor concern.

If you are encountering an error stating "There is no entity IdentityUser with id" even though the user

Check for Data Consistency: - Ensure that the user ID you are querying or referencing in your code

matches exactly (including casing and format) with the ID in the AbpUsers table. 3.

- If the user is missing or the password is incorrect, you can delete the user record and re-seed

Perhaps the current tenant differs from your user.

There is no entity IdentityUser with id even though user exist in ABPUsers entity

- There was a structural change in the LeptonX theme's footer handling for MVC/Razor Pages applications

If your custom footer (_Footer.cshtml) stopped working, it is likely due to changes introduced in recent

for the public site footer, but the support documentation confirms that the AuthServer and similar applications

/Application. - To restore your custom footer, ensure your _Footer.cshtml is located at: Themes/LeptonX

[image.png](/QA/files/3a1c93bafe7daca2859f95fc0e02ea50.png) got no words for that.

[image.png](/QA/files/3a1c93b53a4b32c44216c0b997759252.png) Was there a note for this happening?

If no: wtf???

The AuthServer is configured to resolve the tenant from the subdomain and not from the host-only domain

Tenant Resolver - Ensure your tenant resolver is correctly extracting the tenant from the subdomain

the prefix if the subdomain is present. #### 3.

It was added to try to fix the issue with the the 'discovery document' not returning as https. see #9849

The `Account/EmailConfirmation` page will use the current tenant ID to query the user. !

Exception message and full stack trace: The scenerio is we have a multi-tenant app and we are testing

After making the suggestions to correct the tenant aware email url that is produced by the email generator

is no entity IdentityUser with id = 7c35ab2c-1f30-b33f-1b3a-3a1c93671327!"

is no such an entity.

: There is no such an entity.

Email Confirmation and Reset Password links (from email) redirects to page with 404 after applying changes

management system for them to appear in the Identity > Roles > Permissions modal (in Angular or any

**Application.Contracts Reference Missing** For modular or microservice solutions, the Application.Contracts

management (typically the IdentityService or AdministrationService).

If this reference is missing, the permissions will not be loaded into the UI. 3.

- Ensure the Application.Contracts project is referenced by the permission management service. - Rebuild

ABPPermissionGrants table has custom permission created but unable to see these custom permissions in the

ABPPermissionGrants table has custom permission but unable to see these custom permissions in the identity

- The error occurs because the JWT access token payload is Base64Url encoded, and when its length is

This is a known issue when decoding JWTs manually.

- To fix this in your ABP Angular application, you should add the necessary padding to the token payload

Here is the recommended approach: ```typescript const tokenBody = accessToken.split('.')[1].replace(

The ABP team has acknowledged the problem and suggested similar workarounds until an official fix is

* Failed to execute 'atob' on 'Window': The string to be decoded is not correctly encoded.

the following error when some users log in: `Failed to execute 'atob' on 'Window': The string to be

decoded is not correctly encoded.` Upon investigation, we found that in the getFromToken function

, the access token payload is decoded using atob.

When the payload length is not a multiple of 4 (due to missing Base64 padding =), atob throws this error

Angular UI - atob error while decoding access token (The string to be decoded is not correctly encoded

- The "Unauthorized (401)" error in your Blazor application is likely caused by session or authentication

authentication context or tenant), the authentication cookie or token can be overwritten or invalidated

Returning to the Admin app, your session is no longer valid, resulting in a 401 error.

- This is a common scenario in ABP-based applications with tiered or separated authentication, especially

**Review Tenant Context:** - If your applications are multi-tenant, ensure the correct tenant is selected

Hello Team, I am facing an issue with my Blazor application.

* **Steps to reproduce the issue**: - Log in to the Blazor Admin application and navigate to any

- Open the Public Website and refresh the page.

- At this point, the system shows an Unauthorized (401) error.

I shared the video and log file.

setup, the tenant is typically resolved before login using tenant resolvers (domain, query string, or

If you want to derive the tenant automatically (e.g., from username or email), you need to customize

The tenant selection is from the Account layout page.

You can download the module source code, There is no git repos, see https://abp.io/docs/latest/suite/

place with the input of tenant from the user. wanted to change it to take a user default tenant instead

multi-tenanted original ABP login page, there is a requirement for users to key in the Tenant first,

Can we please get the reference for the login .cshtml and .cs page, we cannot see how Tenant is being

Our intention is for the user not to key in their target tenant at login, and to have the application

derive the tenant instead.

Because with the table 'AbpUsers' with userId as a PK and tenant as a property, users can only be in

and collapse mechanism, which is why it waits for the mouse to leave before collapsing.

Find the method or event handler responsible for toggling the sidebar.

This is usually a function like `toggleSidebar()` or similar, triggered by a button or icon click. 3

If your sidebar uses a service or state management for its open/close state, ensure the state is updated

Hi @maliming, Here is a GIF of the current behaviour.

Hi, We noticed that when you click on the expanded sidebar in the main app, it doesn't immediately

Instead, you have to move the cursor away from the expanded sidebar for the closing to happen.

We were wondering if there is a way to change it so that it closes right away?

The project is based off of the microservice template in case that's useful. Thank you, Daniel

- When using ABP Framework's Account Module with an external provider like Google, the expected out-of-the-box

The registration page should have the email and name fields pre-populated with the information received

claims, or the ABP application is not correctly mapping them.

If this is not happening, you may need to check your provider configuration or customize the claim mapping

I removed the tenancy check (since we're not using multi-tenancy in our application) and ended up with

Could not find details on what is the expected behaviour for ABP.IO out of the box.

In our Google Cloud we've created an OAuth Consent Screen service & client with available scopes:

"Google" button on the registration/login screen, the user experiences: 1.

Name fields and email address are blank Should these fields be pre-populated from the external provider

or is this not implemented by ABP?

If your current solution only allows selecting the date (without time), this is likely due to a limitation

or configuration in your UI layer, not the ABP backend or the Authority Delegation module itself.

Datetime-based delegation is supported by the ABP Authority Delegation feature, and you can enable it

How to update the date picker it is a closed module

So it is a known issue for version 9? my angular is using 9.0.0 when my backend is 9.3.2

I am using Authority delegation feature and it is working fine, my client suggested to have it datetime

based range, so i was researching the docs i found a tutorial https://abp.io/community/articles/authority-delegation-in-abp-commercial

-3wtljpp0#gsc.tab=0 that shows it as datetime by default, while in my solution it is date only.

Any idea if datetime is still supported?

* **Exception message and full stack trace**: No Exception * **Steps to reproduce the issue**:

`, typically occurs when there is a version mismatch between Blazorise core and its provider packages

or remove them to prevent conflicts

- If you are using ABP Framework, also ensure your ABP Blazor packages are compatible with the Blazorise

- If you have customized or copied any theme or provider code, ensure it is also updated to match the

Did I miss something in the migration guides that said Blazorise had gone to 1.8.1 or greater?

Hi, I've updated one of our solutions to use version 9.3.4, and with it Blazorise 1.7.7.

Upon running the solution I get the following error in the ConfigureBlazorise method of the BlazorModule

context) at Volo.Abp.AbpApplicationBase.d__33.MoveNext() I cannot see anyone else that's had the

Do I need to any other references to the project? Thanks

To set the layout options for LeptonX in your ABP application, you are already on the right track with

relevant partial view or layout to remove the breadcrumb area. 4.

There is currently no direct configuration option to hide these; overriding is the recommended approach

relevant components or views in your project.

Is there and documentation for this anywhere?

Im finding the documentation to be really lacking in a lot of areas which is a shame.

I want to use the boxed layout, and the light style.

I dont need it to be selectable in the app. not do i need any of the options drop down menus or the breadcrumb

area but I seem to be forced to use them or have to figure out how to override templates.

Surely there should just be an option to hide the bread crumb, or fix the layout?

that the Angular development server is not serving your application as expected.

- This usually happens if you run `ng serve` (or `yarn start`/`npm start`) in the wrong directory,

or if the Angular app was not built/installed correctly.

your environment is clean (no service workers from previous builds).

Until an official solution is provided, could you please apply the solution provided in the following

` when trying to run it following error occures in dev console: ```Failed to load resource: the

server responded with a status of 404 (Not Found) Refused to connect to 'http://localhost:4200/.well-known

/appspecific/com.chrome.devtools.json' because it violates the following Content Security Policy directive

Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback. ``` !

Hello, We have identified the same problem on our side.

I can recommend you to migrate to the new application builder using this command until we publish an

official fix: ```tsx yarn ng update @angular/cli --name use-application-builder ``` Here is the official

paths inside the `tsconfig.json` file ```tsx { "compileOnSave": false, "compilerOptions": {

angularCompilerOptions": { "enableI18nLegacyMessageIdFormat": false } } ``` You can also use the

Hello, I am using a project generated by using the latest ABP template.

However, the browser throws such error

This will generate a layered solution with the Auth Server integrated into the HttpApi.Host, matching

Currently, there is no "Separate Authentication Server" checkbox for the Blazor Web App template.

The separation is only controlled by the "Tiered" option.

If you want the same behavior as Blazor WebAssembly (where you can choose to separate or not), you must

Is there any work around solution to customize for expected structure? Thanks Dharma

Web App when publish will output one for blazor and one for HttpApi.host included Auth Server, but with

Layered template for Blazor Web App and check Tiered option it will create a solution template with

option "Separate Authentication Server" if i don't check it will create solution template as expected with

How can I do the same for Blazor Web App. Option for Blazor Web App: !

not installed successfully. - This is a common issue if the dependencies were not installed correctly

, often due to problems with npm.

The recommended and supported way for ABP Angular projects is to use Yarn instead of npm.

Make sure Yarn is installed globally: ```bash npm install -g yarn ``` 3.

After successful installation, start the Angular application: ```bash yarn start ``` or ```bash npm

Yes - **Kubernetes Configuration**: Yes - **Grafana Dashboard**: Yes - **Use Local References**: No

- **Aspire**: No - **Optional Modules**: * GDPR * TextTemplateManagement * AuditLogging

postgresql --theme leptonx --skip-migrator --public-website --without-cms-kit --dont-run-bundling -no-file-management

-no-language-management !

Please review this problem and fix the errors in this version. Best regards.