Activities of "maliming"

hi

Can you enable the debug logs and identitymodellogs then share them with liming.ma@volosoft.com?

https://abp.io/support/questions/8622/How-to-enable-Debug-logs-for-troubleshoot-problems

Thanks.

hi

ABP & OpenIddict support the access token + refresh token flow.

Is there an offline_access scope in your angular environment.ts file?

import { Environment } from '@abp/ng.core';

const baseUrl = 'http://localhost:4200';

const oAuthConfig = {
  //...
  scope: 'offline_access MyProjectName'
};

hi

What is your LeptonX package version? It should be 4.1.1 I'm unable to reproduce it in a new template project. Can you share a project?

liming.ma@volosoft.com

Thanks.

hi

It's not only about access tokens, but also the same "problem" with cookies Browsers will strictly protect tokens or cookies. No one can obtain your cookies and tokens.

We also use common protective measures(HTTPS, XSS, XSRF/CSRF).

https://learn.microsoft.com/en-us/aspnet/core/security/?view=aspnetcore-9.0

hi

access tokens issued for one user can potentially be used by another user to make API requests.

Why can one user's token be obtained by another user? How did he get it?

Thanks

hi

The error happened if the current URL ends with /?&&

https://abp.io/?&&

main.0b1b96b4092c5d26.js:1 ERROR TypeError: Cannot read properties of undefined (reading 'toggle')
    at M.toggleCtxMenu (main.0b1b96b4092c5d26.js:1:1484387)
    at main.0b1b96b4092c5d26.js:1:1485112
    at Q1 (main.0b1b96b4092c5d26.js:1:758941)
    at Object.r [as next] (main.0b1b96b4092c5d26.js:1:759098)
    at ye.next (main.0b1b96b4092c5d26.js:1:255667)
    at Qe._next (main.0b1b96b4092c5d26.js:1:255334)
    at Qe.next (main.0b1b96b4092c5d26.js:1:255018)
    at main.0b1b96b4092c5d26.js:1:252848
    at u (main.0b1b96b4092c5d26.js:1:280735)
    at Ru.next (main.0b1b96b4092c5d26.js:1:252685)

Can you create a new question to ask the Angular team?

Thanks.

hi

I can't connect with your Redis server. So I can't test the application speed.

Can you use local Redis to test? We can make sure the problem is about remote Redis.

docker run -p 6379:6379 --name redis -d redis:alpine

Thanks.

hi

There is no logout request in your HAR file.

Can you share an online URL, username, and password? I will log in and test the logout function.

Thanks.

liming.ma@volosoft.com

ok, I will ask our angular Team.

Thanks.

hi

Please share the har file of all requests and responses of Chrome.

liming.ma@volosoft.com