Add AbpStrictRedirectUriValidator to compatible with tenant name in domain.

[maliming]

The problem:

The Authorize endpoint redirect URL of IdentityServer must exist in the database.
The redirect URL is dynamic when mvc or angular resolves tenants from the domain name.

https://tenant1.ng.abp.io
https://tenant2.ng.abp.io

Solution

I rewrote the StrictRedirectUriValidator of Identity server to make it support domain format.

Configure<AbpTenantResolveOptions>(options =>
{
    options.AddDomainTenantResolver("{0}.api.abp.io");
});

services.AddAbpStrictRedirectUriValidator();

This requires the developer to add new client redirect URLs

[seregagorl]

Thank you @maliming and @hikalkan for acting on our request so promptly!

[maliming]

hi @seregagorl

There is IssuerValidator that can compatible with the tenant name in the domain(Issuer).

https://gist.github.com/maliming/37193c20c2bea4c4779164d95b42d8f7