Activities of "rogercprops"

We developed an API that gets the token from the authserver using Duende.IdentityModel 7.0.0 ` public async Task

    var apiEndpoint = _configuration.GetValue<string>("AuthServiceBaseUrl");
    var scope = string.Join(" ", scopes);
    var discoveryCache = new DiscoveryCache(apiEndpoint);
    var disco = await discoveryCache.GetAsync();

    if (disco.IsError)
    {
        Console.WriteLine(disco.Error);
        throw new UserFriendlyException($"Error retrieving discovery document: {disco.Error}");
    }

    var client = new HttpClient();

    var passwordTokenRequest = new PasswordTokenRequest
    {
        Address = disco.TokenEndpoint,
        ClientId = clientId,
        ClientSecret = clientSecret,
        UserName = userName,
        Password = password,
        Scope = scope
    };

    if (Tenant != null) passwordTokenRequest.Headers.Add("tenant", Tenant);
    var tokenResponse = await client.RequestPasswordTokenAsync(passwordTokenRequest);

    TokenResponseDto tokenRequestResponse = new();

    if (tokenResponse.IsError)
    {
        Console.WriteLine("error", tokenResponse);
        throw new UserFriendlyException($"Error retrieving token: {tokenResponse.ErrorDescription}");
    }
    else
    {
        tokenRequestResponse.AccessToken = tokenResponse.AccessToken;
        tokenRequestResponse.RefreshToken = tokenResponse.RefreshToken;
        tokenRequestResponse.ExpiresIn = tokenResponse.ExpiresIn;
    }

    return tokenRequestResponse;
}

`

Here's the curl request to get the token: ` curl --location 'http://localhost:44326/api/token'
--header 'X-Forwarded-For: 192.0.2.172'
--header 'Content-Type: application/json'
--header 'Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den'
--data-raw '{ "tenant": "homefree",

"clientId": "CloverleafApi",
"clientSecret": "Fgf@E98M6XZs3w",
"userName": "testadmin",
"password": "Lucky7E!",
"scopes": ["AdministrationService","AuditLoggingService","AuthServer","ClientService","GdprService","IdentityService", "LanguageService","SaasService","ServicesService", "CommunicationsTemplateService","MemberConfigService","ClientServicesQuery","FinancialService","ContactService","StaffService", "HousingService","EngagementLogService", "DocumentService", "NoteService"]

}'`

Here's the curl request to get the users (the authorization bearer is from the token response: curl --location 'http://localhost:44326/api/identity/users' \ --header 'Authorization: Bearer **** \ --header 'Cookie: .AspNetCore.Culture=c%3Den%7Cuic%3Den'

Same error.

Here's the decoded token with the updated scopes

{ "header": { "alg": "RS256", "kid": "******", "x5t": "******", "typ": "at+jwt" }, "payload": { "iss": "http://localhost:44311/", "exp": 1745502008, "iat": 1745498408, "aud": [ "AuthServer", "IdentityService", "AdministrationService", "ServicesService", "SaasService", "AuditLoggingService", "GdprService", "LanguageService", "ClientService", "CommunicationsTemplateService", "ClientServicesQuery", "ContactService", "StaffService", "MemberConfigService", "FinancialService", "HousingService", "EngagementLogService", "DocumentService", "NoteService" ], "scope": "roles phone email profile address AdministrationService AuditLoggingService AuthServer ClientService GdprService IdentityService LanguageService SaasService ServicesService CommunicationsTemplateService MemberConfigService ClientServicesQuery FinancialService ContactService StaffService HousingService EngagementLogService DocumentService NoteService", "jti": "******", "sub": "******", "preferred_username": "testuser", "email": "******", "role": "admin", "tenantid": "6271b9cb-31a4-07e1-e895-3a18325419b0", "given_name": "******", "family_name":"******", "phone_number_verified": "False", "email_verified": "False", "session_id": "******", "unique_name": "******", "oi_prst": "CloverleafApi", "client_id": "CloverleafApi", "oi_tkn_id": "******" } }

I'm not sure what you mean by checking the user claims. In the admin console I went to Claims for the user in the host & the user in the tenant and there were none.

Again, I don't get the authorization error when I get a token for a user in the host tenant and of course it only returns users where TenantId is null.

Here's the host token decoded: { "header": { "alg": "RS256", "kid": "", "x5t": "", "typ": "at+jwt" }, "payload": { "iss": "http://localhost:44311/", "exp": 1745505879, "iat": 1745502279, "aud": [ "AuthServer", "IdentityService", "AdministrationService", "ServicesService", "SaasService", "AuditLoggingService", "GdprService", "LanguageService", "ClientService", "CommunicationsTemplateService", "ClientServicesQuery", "ContactService", "StaffService", "MemberConfigService", "FinancialService", "HousingService", "EngagementLogService", "DocumentService", "NoteService" ], "scope": "roles phone email profile address AdministrationService AuditLoggingService AuthServer ClientService GdprService IdentityService LanguageService SaasService ServicesService CommunicationsTemplateService MemberConfigService ClientServicesQuery FinancialService ContactService StaffService HousingService EngagementLogService DocumentService NoteService", "jti": "c679b9ed-83dd-4f49-867a-4606cd822dd4", "sub": "3503fbd8-b3bb-e0de-d82f-3a18407a620a", "preferred_username": "cpradmin", "email": "", "role": "admin", "given_name": "", "family_name": "", "phone_number_verified": "False", "email_verified": "False", "session_id": "", "unique_name": "cpradmin", "oi_prst": "CloverleafApi", "client_id": "CloverleafApi", "oi_tkn_id": "******" } }

Hi,

In attempting to build you a small test project to replicate our issue, I built a new micro service solution with ABP Studio but elected to use Abp 9.1 (our current solution is 9.0.4).

I tried to replicate the error with the new solution but able to get a token for a tenant user then get users from api/identity/users without error. That tells me that the error was corrected in either 9.1 or in the micro-service templates.

So I tried to upgrade our Abp packages by first upgrading to the latest version of the ABP CLI. Then I tried to use the ABP Studio, then Abp Suite, then using the ABP CLI from a terminal to upgrade our IdentityService. These only updated the application service project file <PackageReference Include="Volo.Abp.Studio.Client.AspNetCore" Version="0.9.23" /> to <PackageReference Include="Volo.Abp.Studio.Client.AspNetCore" Version="0.9.25" />

None of the other packages were updated. I think this must be a bug in the latest version of ABP CLI/ABP Studio.

In the end, I replaced all of the solutions from the Abp micro-service template with the ones generated I created with 9.1.

You should note that the only change we made to any of the Abp template solutions was to the Auth server CloverleafCMSAuthServerModule. We added this to support getting a token for multi-tenancy to our 9.0.4 version, which I also added to the version created with 9.1. private void ConfigureMultiTenancy() { Configure<AbpMultiTenancyOptions>(options => { options.IsEnabled = true; }); }

So, without going through the differences between the latest micro-service templates and the ones we created with ABP Studio back in February, I don't know if you all fixed the issue in the 9.1 packages or the micro-service templates.

• Template: microservice
• Created ABP Studio Version: 1.0.1
• Current ABP Studio Version: 1.0.1
• Multi-Tenancy: Yes
• UI Framework: mvc
• Theme: leptonx
• Theme Style: system
• Theme Menu Placement: side
• Run Install Libs: Yes
• Database Provider: ef
• Database Management System: sqlserver
• Mobile Framework: none
• Public Website: No
• Social Login: Yes
• Include Tests: Yes
• Dynamic Localization: Yes
• Kubernetes Configuration: Yes
• Grafana Dashboard: Yes
• Use Local References: No
• Optional Modules:
  • GDPR
  • TextTemplateManagement
  • AuditLogging
  • OpenIddictAdmin
• Selected Languages: English, English (United Kingdom), Español
• Default Language: English
• Create Command: abp new ClovlerleafCMS -t microservice --ui-framework mvc --database-provider ef --database-management-system sqlserver --theme leptonx --skip-migrator --without-cms-kit --dont-run-bundling -no-file-management -no-language-management

• Exception message and full stack trace:
• Unable to open Abp Suite
• Steps to reproduce the issue:
  • Upgraded to Abp Studio 1.0
  • Create new microservice solution
  • Add a microservice module
  • Right click on the new microservice and select ABP Suite
  • After a few seconds get an error message "Couldn't open ABP Suite"

The above steps didn't resolve the problem

I ran the abp suite command abp suite [07:59:30 INF] You are running the second generation of the ABP CLI. If you're interested in the legacy CLI, see https://abp.io/new-cli Checking extensions... 📌 ABP CLI 1.0.1 The application to execute does not exist: '/Users/rogerhopkins/.dotnet/tools/.store/volo.abp.suite/9.2.0/volo.abp.suite/9.2.0/tools/net9.0/any/Volo.Abp.Suite.dll'.

So I went through the steps to do a clean uninstall here: https://abp.io/docs/latest/suite/how-to-uninstall

I tried reinstalling and got this message: abp suite install [08:06:44 INF] You are running the second generation of the ABP CLI. If you're interested in the legacy CLI, see https://abp.io/new-cli Checking extensions... [08:06:46 INF] Installing ABP Suite latest version... Tool 'volo.abp.suite' failed to update due to the following: The settings file in the tool's NuGet package is invalid: Entry point file 'Volo.Abp.Suite.dll' for command 'abp-suite' was not found in the package. Tool 'volo.abp.suite' failed to install. Contact the tool author for assistance.

So then I uninstalled ABP Studio, downloaded the install package and reinstalled. In Studio I tried to open Abp Suite and got a prompt that it wasn't installed and asked if I wanted to install. I accepted and that install failed.

So I ran abp suite from terminal and got this message: abp suite install [08:08:27 INF] You are running the second generation of the ABP CLI. If you're interested in the legacy CLI, see https://abp.io/new-cli Checking extensions... [08:08:28 INF] Installing ABP Suite latest version... Tool 'volo.abp.suite' failed to update due to the following: The settings file in the tool's NuGet package is invalid: Entry point file 'Volo.Abp.Suite.dll' for command 'abp-suite' was not found in the package. Tool 'volo.abp.suite' failed to install. Contact the tool author for assistance. [08:08:36 INF] You can also run the following command to install ABP Suite. [08:08:36 INF] dotnet tool install -g Volo.Abp.Suite --add-source https://nuget.abp.io/<your-private-key>/v3/index.json

Tried both commands and they failed dotnet tool install -g Volo.Abp.Suite --add-source https://nuget.abp.io/<mykey>/v3/index.json Tool 'volo.abp.suite' failed to update due to the following: The settings file in the tool's NuGet package is invalid: Entry point file 'Volo.Abp.Suite.dll' for command 'abp-suite' was not found in the package. Tool 'volo.abp.suite' failed to install. Contact the tool author for assistance. rogerhopkins@Rs-MBP-3 .store % dotnet nuget add source https://nuget.abp.io/<mykey>/index.json error: The source specified has already been added to the list of available package sources. Provide a unique source.

Yes. rogerhopkins@Rs-MBP-3 ~ % abp login-info [07:06:12 INF] You are running the second generation of the ABP CLI. If you're interested in the legacy CLI, see https://abp.io/new-cli 📌 ABP CLI 1.0.1 [07:06:14 INF] Login info: Name: Roger Surname: Hopkins Username: rogercprops Email Address: roger@cprops.com Organization: Cooperative Processing Resources

Hi, I followed the steps above but still no luck.

% dotnet nuget locals all --clear Clearing NuGet HTTP cache: /Users/rogerhopkins/.local/share/NuGet/http-cache Clearing NuGet global packages folder: /Users/rogerhopkins/.nuget/packages/ Clearing NuGet Temp cache: /var/folders/cn/j4xfhgq91m3ft78bmt00pg6c0000gn/T/NuGetScratch Clearing NuGet plugins cache: /Users/rogerhopkins/.local/share/NuGet/plugin-cache Local resources cleared. rogerhopkins@Rs-MBP-3 tools % dotnet tool install -g Volo.Abp.Suite --add-source https://nuget.abp.io/**** /index.json Tool 'volo.abp.suite' failed to update due to the following: The settings file in the tool's NuGet package is invalid: Entry point file 'Volo.Abp.Suite.dll' for command 'abp-suite' was not found in the package. Tool 'volo.abp.suite' failed to install. Contact the tool author for assistance. rogerhopkins@Rs-MBP-3 tools %