They are located under identityserver endpoint when you are using tiered application.
I think the subtle way to handle multi-tenancy on external openId provider is, adding tenant-id
claim after login (adding to token) and using this claim in ANZ application.
Can you check IdentityServer Deployment guide?
We have investigated this issue with Angular and Blazor WASM for both versions 5.1.3 and 5.2.0 and couldn't reproduce the problem.
I am getting an exception while click on permission option of particular user.
This is when AdministrationService is making a request to IdentityService using ClientCredentials flow.
Can you share your AdministrationService appsettings IdentityClients
section for kubernetes?
In separate IdentityServer solutions, the Account module is served under IdentityServer. Nevertheless, the permissions should be available in the angular application.
I will create an internal issue about this problem.
Thank you, I have refunded your credit.
Is it separate identity server or not?
Do you post a DTO containing IRemoteStreamContent
?
In your HttpApiModule ConfigureServices
method, try adding:
Configure<AbpAspNetCoreMvcOptions>(options =>
{
options.ConventionalControllers.FormBodyBindingIgnoredTypes.Add(typeof(MyInputDto));
});
Thank you for your report, we will investigate.
User callback from ABP.IO Identity will be identify with GUID and not with orginal user (ex email, user) so we need to duplicate user on ANZ db. Is it possibile to merge or reconcile it with existing user?
Sorry, I don't follow. ABP application (IdentityServer) is an OpenId Provider, which contains the User Store that you authenticate your ANZ application users against. To explain it better; put Google (or Microsoft/Facebook/Twitter etc) instead of ABP application. You only use google login for your ANZ users. If the user is signing in the first time and doesn't exist in your ANZ application, the user is created in your ANZ application with Login provider, without any password. That's why it is an external login. You (ANZ application) don't have user's google (ABP application in your case) password. You only care if the user is authenticated against the external provider.
On ANZ login user must do a click on OpenId but the best option could be direct redirection to ABP.IO Identity. Is it possibile?
The easiest way is to customize the login page and instantly trigger OpenId provider click. For more info, you can check this article.