Random Errors - Current User did not login to the application And Requested Permission is not granted #12565

5 Answer(s)

• 

  0

  oguzhanagir created one year ago

  Support Team

  The UserDelegationAppService requires authentication: The class has [AbpAuthorize] attribute, meaning ALL methods require the user to be logged in.

  [AbpAuthorize]
  public class UserDelegationAppService : AbpZeroTemplateAppServiceBase, IUserDelegationAppService
  

  The ViewComponent doesn't check authentication: The AppActiveUserDelegationsComboboxViewComponent is being rendered in your layout, which can be called even when:

  • The user is not logged in
  • The user's session has expired
  • A user is accessing public/anonymous pages
  • A user doesn't have the required permissions

  GetActiveUserDelegations() uses AbpSession.GetUserId(): This will throw an exception if the user is not authenticated:

  public async Task<List<UserDelegationDto>> GetActiveUserDelegations()
  {
      var query = CreateActiveUserDelegationsQuery(AbpSession.GetUserId(), "username");
      query = query.Where(e => e.StartTime <= Clock.Now && e.EndTime >= Clock.Now);
      return await query.ToListAsync();
  }
  

  Modify your AppActiveUserDelegationsComboboxViewComponent.cs to check if the user is authenticated before calling the service:

  using System.Threading.Tasks;
  using Abp.Domain.Uow;
  using JetBrains.Annotations;
  using Microsoft.AspNetCore.Mvc;
  using CDP.Authorization.Delegation;
  using CDP.Authorization.Users.Delegation;
  using CDP.Web.Areas.App.Models.Layout;
  using CDP.Web.Views;
  using System.Collections.Generic;
  
  namespace CDP.Web.Areas.App.Views.Shared.Components.AppActiveUserDelegationsCombobox
  {
      public class AppActiveUserDelegationsComboboxViewComponent : CDPViewComponent
      {
          private readonly IUserDelegationAppService _userDelegationAppService;
          private readonly IUserDelegationConfiguration _userDelegationConfiguration;
          private readonly IUnitOfWorkManager _unitOfWorkManager;
  
          public AppActiveUserDelegationsComboboxViewComponent(
              IUserDelegationAppService userDelegationAppService,
              IUserDelegationConfiguration userDelegationConfiguration,
              IUnitOfWorkManager unitOfWorkManager)
          {
              _userDelegationAppService = userDelegationAppService;
              _userDelegationConfiguration = userDelegationConfiguration;
              _unitOfWorkManager = unitOfWorkManager;
          }
  
          public async Task<IViewComponentResult> InvokeAsync(string logoSkin = null, string logoClass = "", string cssClass = "d-flex align-items-center ms-1 ms-lg-3 active-user-delegations me-2")
          {
              // Check if user is authenticated before calling the service
              if (!AbpSession.UserId.HasValue)
              {
                  // Return empty model or empty view if user is not logged in
                  var emptyModel = new ActiveUserDelegationsComboboxViewModel
                  {
                      UserDelegations = new List<UserDelegationDto>(),
                      UserDelegationConfiguration = _userDelegationConfiguration,
                      CssClass = cssClass
                  };
                  return View(emptyModel);
              }
  
              return await _unitOfWorkManager.WithUnitOfWorkAsync(async () =>
              {
                  var activeUserDelegations = await _userDelegationAppService.GetActiveUserDelegations();
                  var model = new ActiveUserDelegationsComboboxViewModel
                  {
                      UserDelegations = activeUserDelegations,
                      UserDelegationConfiguration = _userDelegationConfiguration,
                      CssClass = cssClass
                  };
  
                  return View(model);
              });
          }
      }
  }
  

  Alternatively, you can modify your layout file to only render the component when the user is authenticated.

  @if (User.Identity.IsAuthenticated)
  {
      @await Component.InvokeAsync("AppActiveUserDelegationsCombobox", new { cssClass = "d-flex align-items-center ms-1 ms-lg-3 active-user-delegations me-2" })
  }
  

  Markdown is supported

  Copy & paste or drag & drop images (max 30 MB per image)

  Save Cancel
• 

  0

  kansoftware created one year ago

  [oguzhanagir] said: AppActiveUserDelegationsComboboxViewComponent

  I will verify your suggestions. But what about the first two warnings, are they two due this AppActiveUserDelegationsComboboxViewComponent class? Or will they also get fixed with the mentioned corrections

  Markdown is supported

  Copy & paste or drag & drop images (max 30 MB per image)

  Save Cancel
• 

  0

  oguzhanagir created one year ago

  Support Team

  Hi @kansoftware

  The first two warnings are not directly caused by the AppActiveUserDelegationsComboboxViewComponent itself, but they occur for similar reasons. When an unauthenticated or unauthorized user accesses a component, controller, or view that requires permissions.

  Once you apply the suggested fix (checking authentication before invoking the service or rendering the component), those warnings should also stop appearing, as the same root cause unauthorized access will be handled properly.

  Markdown is supported

  Copy & paste or drag & drop images (max 30 MB per image)

  Save Cancel
• 

  0

  kansoftware created one year ago

  [oguzhanagir] said: Hi @kansoftware

  The first two warnings are not directly caused by the AppActiveUserDelegationsComboboxViewComponent itself, but they occur for similar reasons. When an unauthenticated or unauthorized user accesses a component, controller, or view that requires permissions.

  Once you apply the suggested fix (checking authentication before invoking the service or rendering the component), those warnings should also stop appearing, as the same root cause unauthorized access will be handled properly.

  Hey, I am still facing the warnings. We have identified the cause of the Required Permission issue. Randomly the role id getting set in the AbpZeroUserPermissions cache is wrong and due to that reason the permission getting cached in AbpZeroRolePermissions is wrong. Is there something which can cause this?

  Markdown is supported

  Copy & paste or drag & drop images (max 30 MB per image)

  Save Cancel
• 

  0

  oguzhanagir created one year ago

  Support Team

  Hi @kansoftware

  Sorry for the late reply. We haven't been able to replicate this on our end. Could you please email us the steps or your project to [email protected] so we can provide a more specific answer to your issue.

  Thank you.

  Markdown is supported

  Copy & paste or drag & drop images (max 30 MB per image)

  Save Cancel