AbpProfileService.IsActiveAsync doesn't check if the user is Active. F…

…ixed #3762

src/Abp.ZeroCore.IdentityServer4/IdentityServer4/AbpProfileService.cs

@@ -3,15 +3,17 @@
 using Abp.Domain.Uow;
 using Abp.Runtime.Security;
 using IdentityServer4.AspNetIdentity;
+using IdentityServer4.Extensions;
 using IdentityServer4.Models;
 using Microsoft.AspNetCore.Identity;
 
 namespace Abp.IdentityServer4
 {
-    public class AbpProfileService<TUser> : ProfileService<TUser> 
+    public class AbpProfileService<TUser> : ProfileService<TUser>
         where TUser : AbpUser<TUser>
     {
         private readonly IUnitOfWorkManager _unitOfWorkManager;
+        private readonly UserManager<TUser> _userManager;
 
         public AbpProfileService(
             UserManager<TUser> userManager,
@@ -20,6 +22,7 @@ IUnitOfWorkManager unitOfWorkManager
         ) : base(userManager, claimsFactory)
         {
             _unitOfWorkManager = unitOfWorkManager;
+            _userManager = userManager;
         }
 
         [UnitOfWork]
@@ -38,7 +41,10 @@ public override async Task IsActiveAsync(IsActiveContext context)
             var tenantId = context.Subject.Identity.GetTenantId();
             using (_unitOfWorkManager.Current.SetTenantId(tenantId))
             {
-                await base.IsActiveAsync(context);
+                var sub = context.Subject.GetSubjectId();
+                var user = await _userManager.FindByIdAsync(sub);
+
+                context.IsActive = user != null && user.IsActive;
             }
         }
     }