can not login using Swagger

[sajasbana]

Dears
Iam using abp mvc with multi pages template, I update solution from nuget package,
everything in application is working only small issue when try swagger
-if try login from swaggerit show success login like this,
curl -X POST --header 'Content-Type: application/json' --header 'Accept: application/json' --header 'X-XSRF-TOKEN: nZA_eRB5T4OU6uNbzNmRY6cgoExHFbygioA5enbakT4YY2GcJHmACcuqEwmSGCdF6311dAwSMqBCNEKfnuMUKT3nMsQl_RBKgbsSGVtnHOs1' -d '{ \ "tenancyName": "", \ "usernameOrEmailAddress": "admin", \ "password": "123qwe" \ }' 'http://localhost:61814/api/Account'

{ "result": "LJZqORn3tTCF-t29W6wK5JNodT5G0pzKW8V6ylf8DKjTrlcXKMiwXfnbGEhhcjsyu4KfDtWww0GGEwsHAuU3siYvmYmjZgV0b_2YT70wPG4JK-fkkvk3LU9525u96W2H5gWm2JwiD0olOVUgsY56fZMwoS_TGE1WFfJOPK2YHF1_Xe8Fdti6Xy4rlKPJLS6q9vbbgEuteyt35yRZ_NlFz8R_lyp9Y4hgc0WYul7xn8SAtO33A-wqXSMqUuFAKIBCksy55pOqZOiqB9MyY6eNz_BUlFfLEgwzQ9wTgqT8xqbpxPj7ZI1bbL-iJzMmhfMlHqA4lBdbHWJuRlVYIJMxWK1RlZ1bvPfSdaKn2jyoEWXKThIScEdstsozwiDYiXr1EBkBm61nRvvGKxUC4PEVOfG7E4hRHjWf-0MR8hFo54zuJ1hWdzNenGpz36k_7JWsbL7Dl6cZLNdkhXVmiANkdA7YHEKsDZyUDM4P9lUMV4w", "targetUrl": null, "success": true, "error": null, "unAuthorizedRequest": false, "__abp": true }

but when try see from session api the current login user it shows null in tenant and userId
like this

{ "result": { "user": null, "tenant": null }, "targetUrl": null, "success": true, "error": null, "unAuthorizedRequest": false, "__abp": true }

Please help in this issue

[maliming]

Does the request header contain "Authorization: Bearer xyz"?

[sajasbana]

as you can see it is like this

curl -X POST --header 'Content-Type: application/json' --header 'Accept: application/json' --header 'X-XSRF-TOKEN: nZA_eRB5T4OU6uNbzNmRY6cgoExHFbygioA5enbakT4YY2GcJHmACcuqEwmSGCdF6311dAwSMqBCNEKfnuMUKT3nMsQl_RBKgbsSGVtnHOs1' -d '{ \ "tenancyName": "", \ "usernameOrEmailAddress": "admin", \ "password": "123qwe" \ }' 'http://localhost:61814/api/Account'

i dont see Authorization: Bearer xyz

how can I add it?
I download solution from templates

[ryancyq]

You can try the approach mentioned in #3653 (comment)

[acjh]

There's no "login from Swagger". It just calls an endpoint.

[sajasbana]

@acjh
I mean Authenticate
these is my steps when using swagger:

• call: http://localhost:61814/api/Account/Authenticate ... it show success
• then call e.g: http://localhost:61814/api/services/app/role/GetAll -- it show error "message": "Current user did not login to the application!"

I follwed the steps in swagger integration but it seems the is something wrong ... see images

[maliming]

@sajasbana
Does your request have an Authorization header?

[sajasbana]

@maliming
Thank you for replay ... I just understand I have to add Authorization header as this link explain
https://aspnetboilerplate.com/Pages/Documents/Zero/Startup-Template#token-based-authentication

it will be helpful if swagger works in mvc mpa template also and be able to add Authorization header

[acjh]

I follwed the steps in swagger integration but it seems the is something wrong ... see images

That's Postman...

[sajasbana]

@acjh
this is from swagger ui ... same results as postman before i add Authorization header ... but now i know how add Authorization header to postman but what about swagger ... how to fix this?

[acjh]

var authToken = '';
var bearerAuth = new SwaggerClient.ApiKeyAuthorization('Authorization', 'Bearer ' + authToken, 'header');
swaggerUi.api.clientAuthorizations.add('bearerAuth', bearerAuth);

[sajasbana]

@acjh
your code worked and add Authorization header but it is empty
Is there way to set the value of it? this will be very helpful
wwhen click the button

[acjh]

Copy and paste from the value of "result".

[sajasbana]

Dear @acjh
I did as these images shows but it shows invalid anti-forgery... there wrong in my code

another test

[acjh]

Clear your cookies.

[sajasbana]

@acjh
appreciate you valuable time
it worked now as you see, the value should be X-XSRF-TOKEN: null

now is there way to fill header 'Authorization: Bearer xxx' value dynamicly?

[sajasbana]

@acjh
I want share my solution for this issue

• found this js file which add button authorize to swagger for mvc mpa verson: https://github.com/janmohammadi/swashbuckle-authorize

• also took two js files from aspcore template and modify them

please add to template for other users

Scripts.zip

[ryancyq]

@sajasbana

Didn't notice that you were referring to module-zero-template

Not sure if you have seen it. The authorize button has already added into MPA

See https://github.com/aspnetboilerplate/module-zero-core-template/blob/master/aspnet-core/src/AbpCompanyName.AbpProjectName.Web.Host/wwwroot/swagger/ui/index.html#L98

[sajasbana]

@ryancyq
I talkin about this template ... there is no auth button ... it will be helpful if you add it