Please answer the following questions before submitting an issue. YOU MAY DELETE THE PREREQUISITES SECTION.
We have a deployment on Azure with scaled out enabled with 3 instances for Web API tier.
ARR (Affinity Cookie) configuration is enabled to allow all requiests to be directed to the same instance for a given user (sticky session) .
All the functionality works fine except for Impersonation. When admin user selects one of the other users to impersonate he gets an error:
"Abp.UI.UserFriendlyException: Impersonation token is invalid or expired! at PatientPortal.Authorization.Impersonation.ImpersonationManager.GetImpersonatedUserAndIdentity(String impersonationToken) in D:\a\1\s\src\PatientPortal.Core\Authorization\Impersonation\ImpersonationManager.cs:line 38 at PatientPortal.Web.Controllers.TokenAuthController.ImpersonatedAuthenticate(String impersonationToken) in D:\a\1\s\src\PatientPortal.Web.Core\Controllers\TokenAuthController.cs:line 346 at lambdamethod(Closure , Object ) at Microsoft.Extensions.Internal.ObjectMethodExecutorAwaitable.Awaiter.GetResult() at Microsoft.AspNetCore.Mvc.Internal.ActionMethodExecutor.AwaitableObjectResultExecutor.Execute(IActionResultTypeMapper mapper, ObjectMethodExecutor executor, Object controller, Object[] arguments) at System.Threading.Tasks.ValueTask1.getResult() at Microsoft.AspNetCore.Mvc.Internal.ControllerActionInvoker.InvokeActionMethodAsync() at Microsoft.AspNetCore.Mvc.Internal.ControllerActionInvoker.InvokeNextActionFilterAsync() UserFriendlyException.Code:0 UserFriendlyException.Details:"
We use AbpMemoryCacheManager, and if every user requests hits the same appservice instance there should not be an issue.
Please share your experience with such issues
Thanks, Sergei
Hi @ismcagdas
I will send the pentest results via email.
Thanks
What is your product version?
What is your product type (Angular or MVC)?
What is product framework type (.net framework or .net core)?
What is ABP Framework version? (5.3.2)
How can I show the date exactly as it is from the database to the client without any timezone conversions?
Hello,
The answer is a bit ambigous. Does that mean two factor login is not supported for swagger or that we just didn't implement it properly?
What is your product version: 7.2.0 What is your product type: Angular What is product framework type: .Net Core
Hello,
I've enabled two factor authentication for a user. When logging into the UI it works fine as expected. However, when logging into the API I get an error with no means of resolving the issue.
Is this the intended behaviour for the framework or am I missing something?
Issue has been resolved, thanks!
Hello, I am getting error 404 not found when clicking on that link but I do not get any results when searching for "SessionTimeOut" In tenant-settings.component.html.
What is your product version: 7.2.0 What is your product type: Angular What is product framework type: .Net Core
Hi there,
I am currently using ASP.NET Core Angular v7.2.0 and I noticed that there is a feature to enable Session Timeout.
https://docs.aspnetzero.com/en/aspnet-core-angular/v7.2.0/Features-Angular-Tenant-Settings
However, when I login as a tenant I do not see the same settings regarding session timeout. What do I need to do in order to see and enable the setting?
Thank you,