Activities of "dreamsmiths"

Thanks for the response.

The example you provided shows that all three sites are hosted on the same domain. Would the process work exactly the same when hosting on three different domains?

Because I believe step 9 in the example "Turkey can now retrieve the ticket from the cookie" wont be as easy if on different domains, because cookies cannot be read across different domains

Hmm. So this statement is not completly this simple?

• user can log into Angular app (hosted on domain A)
• user will then automatically be logged in on public app (hosted on domain B)

If I am understanding correctly the user first has to click on the login button on the public app, before he will be shown as logged into the public app?

In other words he can go directly to the admin portal and login, but then when he manually navigates to the public app he won't show as logged in? He first has to click the login button?

Sorry about all the questions, but I'm struggling to grapple how this would work (security wise):

If I log into Site A, I can then do an API call from Site B to get the details of the person who logged in?

• Can you provide an example of this API call?
• I assume you have to set permissions somehow which websites have access to this login information, where would I set this?

I couldn't find too much documentation on this: <a class="postlink" href="https://www.aspnetzero.com/Documents/Development-Guide-Core#single-sign-on">https://www.aspnetzero.com/Documents/De ... le-sign-on</a>

Thanks for the feedback.

Just to 100% sure.

• user can log into Angular app (hosted on domain A)
• user will then automatically be logged in on public app (hosted on domain B)
• single database works fine

correct?

What do you mean by: "unless you use the same database" ?

"It allows a user to login both on Angular and Public websites once. This approach works when you host API, Angular App and Public App on different servers/domains unless you use the same database."

Just to confirm:

• this mean the user can log into the angular app, and he will automatically be logged into the Public website
• this works when you have the api, angular app and public website hosted on different domains
• this doesnt work if you use one database? (this doesnt make sense to me)

Hi

How would you replace this function you mentioned, without changing the "\node_modules\abp-ng2-module\src\abpHttp.ts" file?

Regards

I don't see this in the "\node_modules\abp-ng2-module\src\abpHttp.ts" file:

abp.message.error

Where would I be able to change it, without changing the node_module files? Can you please show how to do this?

I don't see this in the "\node_modules\abp-ng2-module\src\abpHttp.ts" file:

abp.message.error

Where would I be able to change it, without changing the node_module files?

We need to upgrade a lot of packages to be able to use interceptors, including swagger etc. This is giving lots of issues, and have spent most of the day struggling with upgrades, and don't really want to take the risk in upgrading.

The thing we want to do is:

• Server side we currently throw a specific UserFriendlyException (this error can be thrown from multiple API calls )
• Clientside we want to check this UserFriendlyException at a global level, and if this matches a specific String, we want to log the user out.

There must be a way to replace/overriding the "showError" method, without changing the "\node_modules\abp-ng2-module\src\abpHttp.ts" file?

Hi

I am running into some issues in using the interceptors.

Is there any way to override/ replace the showError function with my own implementation?

Snippet of current code:

showError(error: IErrorInfo): any {
      alert("am in");
        if (error.details) {
            return this._messageService.error(error.details, error.message || this.defaultError.message);
        } else {
            return this._messageService.error(error.message || this.defaultError.message);
        }
    }

Regards David