Hello,
I managed to solve the problem by adding this code to auth server to run in https.
if (!env.IsDevelopment())
{
app.Use((ctx, next) =>
{
/* This application should act like it is always called as HTTPS.
* Because it will work in a HTTPS url in production,
* but the HTTPS is stripped out in Ingress controller.
*/
ctx.Request.Scheme = "https";
return next();
});
}
Also i change the health checks code in all services and apps to this.
settings.AddHealthCheckEndpoint("AuthServer Health Status", $"http://{Dns.GetHostName()}{healthCheckUrl}");
I have checked all the possible problems above and I can't fix it.
When I click on the login option from the Blazor UI, I noticed that the redirect URL is in http and it is forwarded to https.
Also the openid config json file is
{ "issuer": "https://auth.dreamlist.gr/", "authorization_endpoint": "http://auth.dreamlist.gr/connect/authorize", "token_endpoint": "http://auth.dreamlist.gr/connect/token", "introspection_endpoint": "http://auth.dreamlist.gr/connect/introspect", "end_session_endpoint": "http://auth.dreamlist.gr/connect/endsession", "revocation_endpoint": "http://auth.dreamlist.gr/connect/revocat", "userinfo_endpoint": "http://auth.dreamlist.gr/connect/userinfo", "device_authorization_endpoint": "http://auth.dreamlist.gr/device", "jwks_uri": "http://auth.dreamlist.gr/.well-known/jwks", "grant_types_supported": [ "authorization_code", "implicit", "password", "client_credentials", "refresh_token", "urn:ietf:params:oauth:grant-type:device_code", "LinkLogin", "Impersonation" ], "response_types_supported": [ "code", "code id_token", "code id_token token", "code token", "id_token", "id_token token", "token", "none" ], "response_modes_supported": [ "query", "form_post", "fragment" ], "scopes_supported": [ "openid", "offline_access", "email", "profile", "phone", "roles", "address", "AuthServer", "IdentityService", "AdministrationService", "CrmService", "SaasService", "AuditLoggingService", "GdprService", "FileManagementService", "LanguageService", "ChatService" ], "claims_supported": [ "aud", "exp", "iat", "iss", "sub" ], "id_token_signing_alg_values_supported": [ "RS256" ], "code_challenge_methods_supported": [ "plain", "S256" ], "subject_types_supported": [ "public" ], "prompt_values_supported": [ "consent", "login", "none", "select_account" ], "token_endpoint_auth_methods_supported": [ "client_secret_post", "private_key_jwt", "client_secret_basic" ], "introspection_endpoint_auth_methods_supported": [ "client_secret_post", "private_key_jwt", "client_secret_basic" ], "revocation_endpoint_auth_methods_supported": [ "client_secret_post", "private_key_jwt", "client_secret_basic" ], "device_authorization_endpoint_auth_methods_supported": [ "client_secret_post", "private_key_jwt", "client_secret_basic" ], "claims_parameter_supported": false, "request_parameter_supported": false, "request_uri_parameter_supported": false, "tls_client_certificate_bound_access_tokens": false, "authorization_response_iss_parameter_supported": true }
I have checked all the appsettings and everything is in https. I've searched for the problem and it seems like everything is set up correctly on https. I don't know what else to look for to find what's wrong.
Hello,
I have deployed my abp.io with blazor server ui microservice solution in aws. When i click login button from ui, I redirected to auth, I complete the authorization process but when i redirected back to ui, I get error https://app.dreamlist.gr/Error?httpStatusCode=400 If I go to https://auth.dreamlist.gr and login from there then I have access to all the services through the swagger ui, but I cannot login from ui as after authentication I go to https://app.dreamlist.gr/Error?httpStatusCode=400
My app is at https://app.dreamlist.gr Auth Server https://auth.dreamlist.gr Web gateway https://webgateway.dreamlist.gr
Please use the default abp.io admin account credentials to reproduce the problem. admin 1q2w3E*
Abp Studio Solution Configuration
[OpenIddictApplications] ClientId = 'BlazorServer' ["https://app.dreamlist.gr/signout-callback-oidc"] ["https://app.dreamlist.gr/signin-oidc"]
Blazor Server app.settings { "App": { "Name": "YSD Logic", "SelfUrl": "https://app.dreamlist.gr", "EnablePII": false, "HealthCheckUrl": "/health-status", "BasePath": "" }, "AuthServer": { "Authority": "https://auth.dreamlist.gr", "RequireHttpsMetadata": true, "ClientId": "BlazorServer", "ClientSecret": "1q2w3e*", "IsOnK8s": "false", "MetaAddress": "https://auth.dreamlist.gr" }, "Logging": { "LogLevel": { "Default": "Information", "Microsoft": "Warning", "Microsoft.Hosting.Lifetime": "Information" } }, "AllowedHosts": "*", "RemoteServices": { "Default": { "BaseUrl": "https://webgateway.dreamlist.gr" }, "CrmService": { "BaseUrl": "https://crm.dreamlist.gr" }, "FileManagementService": { "BaseUrl": "https://file.dreamlist.gr" } }, ... }