Activities of "balazs.koczab"

So if my understanding is correct, if I already have a lot of different ABP applications in different repositories without ".Web" projects (all the applications have an angular UI, a ".Http.Api.Host" API project and an "Authserver"), it is** NOT** possible with ABP framework to implement a landing page and make all the applications to authorize through that page (SSO), right? What I want to achive is to authenticate once in a landing page, and from that point, all the different angular applications are become logged in automatically.

Hi,

Could you please share the source code of that TestSSO project with me?

Hi

The Authserver project of the TestMesApp is not used at all. I've just deleted it to have a clearer picture.

What I want to achive is a lot of different "business" ABP applications (TestMesApp is an example for that) for different purposes, and one "landig" ABP application, which takes care on the authentication and authorization of all that applications (which is SignInApp),

so if a user logs in in SignInApp, can navigate to any of the other applications (TestMesApp) with a valid user session,

BUT also can start (and finish) her/his job on any of the "business" applications (TestMesApp) by redirecting to SignInApp's authserver,

logging in and redirecting back automatically.

I don't want to use an external provider (like Azure AD) to manage my identity records, I want it to be handled by SignInApp.

hi

I've just added you. I put all the things in one single commit wich is an addition to the default abp app. I've also updated version to 9. Thanks!

hi maliming

Thank you for your response. Unfortunately it is still not working.

My setup: I've created a "SignInApp" and a "TestMesApp" to try it out. Modified the ...HttpApi.Host project's ...HttpApiHostModule.cs file's ConfigureAuthentication for both of the applications:

In the dbmigrator project of SignInApp, I've added all the applications to the OpenIddict config like this:

I've also extended the OpenIddictDataSeederContributor of SigniApp :

Authserver url of TestMesApp is set to the authserver url of SignInApp in the appsettings.json and environment.ts.

Actual results: scenario 1: I can sign in SignInApp but TestMesApp is still not authenticated. After it, if I click to the login button of TestMesApp the page refreshes, but nothing happens.

scenario2: If I delete the AspNetCore.Identity.Application cookie from the browser (for some reason it is not deleted when I logging out from SigninApp) I can click the login button to TestMesApp, which now redirects to the SignInApp's Authserver's login page. I can give in my credentials, it redirects back to the homepage but it is still not logged in. Now if I refreshing the SignInApp it is still not logged in, but if I click to the login button, it logs in without asking for credentials.

Am I doing something wrong? Is any of the above steps unnecessary?

Unfortunately it is not. What I want is an example/document/howto about implementing both openiddict server and client side with my own ABP applications. I don't want to use external providers at all.

Thank you for your reply. I've checked that document, and it is for SSO with Microsoft Identity Platform. As I mentioned, I don't want to use external provider for identity management. Could you please provide me an example where my own ABP "landing" application is the identity provider? Thank you!

Dear ABP Team,

What I want to achive is a lot of different "business" ABP applications (with the same configuration as below) for different purposes, and one "landig" ABP application, which takes care on the authentication and authorization of all that applications, so if a user logs in in the landing page, can navigate to any of the other applications with a valid user session, BUT also can start (and finish) her/his job on any of the "business" applications by redirecting to the "landing" app, logging in and redirecting back automatically. I don't want to use an external provider (like Azure AD) to manage my identity records, I want it to be handled by the "landing" app. Could you please provide me an example about how to do that SSO setup with ABP?

• ABP Framework version: v8.3.2
• UI Type: Angular
• Database System: EF Core + SQL Server,
• Tiered (for MVC) or Auth Server Separated (for Angular): Layered application, separate Authentication Server