Activities of "maliming"

ok, I will ask our angular team.

Thanks

Can you share the all related websites logs for the 500 error?

See https://abp.io/support/questions/8622/How-to-enable-Debug-logs-for-troubleshoot-problems to enable debug logs and share the logs.txt files

Thanks.

We need to make the below scheme to be https://

hi

Can you try to always set https ?

app.Use(async (ctx, next) =>
{
    ctx.Request.Scheme = "https";
    await next();
});

If it's not working, please share the debug logs of AuthServer.

See https://abp.io/support/questions/8622/How-to-enable-Debug-logs-for-troubleshoot-problems

var loggerConfiguration = new LoggerConfiguration()
    .MinimumLevel.Debug()
    .MinimumLevel.Override("Microsoft.EntityFrameworkCore", LogEventLevel.Warning)
    .MinimumLevel.Override("OpenIddict", LogEventLevel.Verbose)
    .Enrich.FromLogContext()
    .WriteTo.Async(c => c.File("Logs/logs.txt"))

hi

EF core does not allowed keys to be nullable.

This is an EF Core(SQL) limitation. You can do this.

Thanks.

The default CacheAbsoluteExpiration is 1 hour

hi

Please share the full module code.

Have you added this code?

liming.ma@volosoft.com

Thanks.

hi

Can you SetIssuer to https website url?

public override void PreConfigureServices(ServiceConfigurationContext context)
{
    //...
    PreConfigure<OpenIddictServerBuilder>(serverBuilder =>
    {
        serverBuilder.SetIssuer(new Uri(configuration["AuthServer:Authority"]!));
    });
    //...
}

hi

You can also try to set ctx.Request.Scheme to https if your app is behind an HTTPS reverse proxy.

public override void OnApplicationInitialization(ApplicationInitializationContext context)
{
    var app = context.GetApplicationBuilder();
    var env = context.GetEnvironment();

    app.Use((ctx, next) =>
    {
        ctx.Request.Scheme = "https";
        return next();
    });
   /...

Thanks.

hi

dynamic claim impact to Access Token lifetime?

The RemoteRefreshUrl default value will be JwtBearerOption.Authority + "/api/account/dynamic-claims/refresh"

Dynamic will not change the access token lifetime. But it will make the current login state invalid if the API can't reach the AuthServer.

Therefore, your API website must communicate with the AuthServer website using RemoteRefreshUrl.

Thanks.