The 'oi_act_lft' claim present in the specified principal is malformed or isn't of the expected type #15526
Labels
Comments
|
Sorry, this is my problem ~~ The code uses oi_act_lft |
|
@hyzx86 were you adding the |
Yes, there is. I made a custom UserClaimsProvider to automatically extend the validity of token after the user logs in. |
|
I deleted them for the time , but is there a better way to specify this expiration date? It's an hour now, and I hope it can be extended to one week. |
|
@kevinchalet ， Thanks for your advice, the problem has been solved perfectly 👍 public class UserTokenLifeTimeClaimsProvider : IUserClaimsProvider
{
private readonly IHttpContextAccessor _httpContextAccessor;
public UserTokenLifeTimeClaimsProvider(IHttpContextAccessor httpContextAccessor)
{
_httpContextAccessor = httpContextAccessor;
}
public Task GenerateAsync(IUser user, ClaimsIdentity claims)
{
var lifeTime = TimeSpan.FromHours(10);
var request = _httpContextAccessor.HttpContext.Request;
if (request.Path.Value.ToLower().EndsWith("token") && request.Method.ToUpper() == "POST")
{
if (request.Form["rememberMe"] == "true")
{
lifeTime = TimeSpan.FromDays(7);
}
//claims.SetAccessTokenLifetime(lifeTime);
claims.SetRefreshTokenLifetime(lifeTime);
}
return Task.FromResult(claims);
}
} |
This was referenced Apr 1, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Describe the bug
To Reproduce
Steps to reproduce the behavior:
My application worked fine when using oc 1.8, but after upgrading to 1.9 preivew, the token api threw 500 error codes
OpenIdServerSettings
OpenId Application Settings
{ "ApplicationId": "fc34e93a3a424a5db77db9f5b54bfef9", "ClientId": "easyoc_antd_client", "ConsentType": "implicit", "DisplayName": "easyoc_antd_client", "DisplayNames": {}, "Id": 1, "Permissions": [ "ept:logout", "gt:authorization_code", "gt:refresh_token", "ept:authorization", "ept:token", "rst:code", "scp:permission", "scp:email", "scp:offline_access", "scp:roles", "scp:profile", "scp:openid" ], "PostLogoutRedirectUris": [ "http://salesportal.localhost:2688/auth/logout_redirect" ], "RedirectUris": [ "http://salesportal.localhost:2688/auth/redirect" ], "Requirements": [], "Roles": [], "Settings": {}, "Type": "public" }Expected behavior
Expect to get the Token correctly
Screenshots
Request：
Response：
Logs
The text was updated successfully, but these errors were encountered: