Thanks for your help, I was reading about the rules but did not get much details on getting roles through it. I will try your solution and see if i get the roles in Login callback.
2 Likes
@mathiasconradt, @konrad.sopala, i tried adding above into the rule like:
function (user, context, callback) {
context.idToken['https://any-namespace/roles'] = context.authorization.roles;
context.accessToken['https://any-namespace/roles'] = context.authorization.roles;
return callback(null, user, context);
}
But it is giving me the following error when i am trying to test it:
ERROR: Cannot read property 'roles' of undefined
Is there some issue in this? Also, I saw a rule in the rule list to get the roles from database, i tried using that but did not get the roles in the response. Can you let me know if i am doing something wrong here? thank you.
In this case, the context.authorization is undefined, you probably don’t have any roles assigned to that user? (i.e. via Dashboard > Users & Roles > Roles)
Best to add a check to the rule code that checks whether context.authorization is available or not.
Roles are assigned to that user, i checked couple of times.
I am able to login to the application but still I am not getting the roles in the user response, here is my code may this help you understanding if i m doing something wrong here:
When user clicks on login button, here is the implementation that runs to open the Auth0 login:
if (_settingManager.UseAuth0Authentication)
{
HttpContext.GetOwinContext().Authentication.Challenge(new AuthenticationProperties
{
RedirectUri = Url.Action("Auth0LoginCallback", "Account")
},
"Auth0");
return new HttpUnauthorizedResult();
}
And when I get the callback on the Auth0LoginCallback, here is what i am doing there:
public ActionResult Auth0LoginCallback()
{
string username = User.Identity.Name;
var user = _userProfileManager.FindByUserProfileName(username);
if (user == null)
{
UserProfile userProfile = new UserProfile()
{
UserName = username
};
_userProfileManager.CreateUserProfile(userProfile);
}
return Redirect(Url.Action("Index", "Main"));
}
Here I am hoping to get the user role in the User object, I am getting all the information but not role.
Here are the User and User.Identity object data:
User:
{System.Web.Security.RolePrincipal}
CachedListChanged: false
Claims: {System.Security.Claims.ClaimsPrincipal.<get_Claims>d__37}
CookiePath: "/"
CustomSerializationData: null
ExpireDate: {27-03-2020 13:30:15}
Expired: false
Identities: Count = 1
Identity: {System.Security.Claims.ClaimsIdentity}
IsRoleListCached: false
IssueDate: {27-03-2020 13:00:15}
ProviderName: "AspNetSqlRoleProvider"
Version: 1
User.Identity
{System.Security.Claims.ClaimsIdentity}
Actor: nullUser
AuthenticationType: "Cookies"
BootstrapContext: null
Claims: {System.Security.Claims.ClaimsIdentity.<get_Claims>d__51}
CustomSerializationData: null
IsAuthenticated: true
Label: null
Name: "rakesh@gmail.com"
NameClaimType: "name"
RoleClaimType: "http://schemas.microsoft.com/ws/2008/06/identity/claims/role"
The Role Rue is enabled from the Auth0 dashboard and this user has the Role assigned as well. I see the RoleClaimType but not sure if that can be of help here.
Please let me know if i need to do something to make it work. Thank you for your help.
Roles are assigned to that user, i checked couple of times.
Can you post the screenshot of user with his assigned role, and then also dump the context via console.log(JSON.stringify(context)) in the rule, then check it in the Webtask Realtime logs.
I just tested it, having a user with roles assigned via RBAC, and it clearly shows in the context object.
@mathiasconradt Here is the screenshot of the user.
But How can i get the context in my code? Thank you
I installed the given extention but I am getting an error when i try opening the extention:
{"error":"credentials_required","message":"No authorization token was found"}
Can’t do anything without seeing the context output of the Rule. Not sure why the extension gives you that error. Did you login with your regular Dashboard credentials? Can you otherwise post a screenshot of that error.
@mathiasconradt, I am able to get the role in the login response now. I had to update the configuration a bit in application and it started working . Thanks for your help.
2 Likes
Good to hear it’s working now 
2 Likes
Hi @mathiasconradt had another small questions, can you please help me with it?
I am trying to get the email address and connection name in the user response object in the User.Identity object in the application but not getting it.
I see Context https://auth0.com/docs/rules/references/context-object has these properties and when i print it on console, it is showing but not coming in the login response. I tried adding these properties like we added roles but it did not work. Can you please let me know if we need to somehting different if we need email and connection name in the login details? I need these details to hit the change password API call.
I tried adding these properties like we added roles but it did not work
Please provide the code in your rule for this.
Hi @mathiasconradt , here is my current code,
function (user, context, callback) {
if (context.authorization !== null && context.authorization.roles !== null) {
context.idToken['https://any-namespace/roles'] = context.authorization.roles;
context.accessToken['https://any-namespace/roles'] = context.authorization.roles;
}
if (context !== null) {
context.connection = context.connection;
}
if (user !== null) {
context.email = user.email;
}
console.log("Context " + JSON.stringify(context));
console.log("User " + JSON.stringify(user));
console.log("User email " + user.email);
return callback(null, user, context);
}
I also tried other options like passing the connection and email in the accessToken but it gives me an error
This line isn’t correct.
context.email = user.email;
You need to add it to the context.accessToken (or the idToken respectively), which is via:
context.accessToken['https://any-namespace/email'] = ...
context.accessToken['https://any-namespace/connection'] = ...
and it needs to be namespaced.
Yes, I had tried similar way but it was giving me an error. I will add it again and let you know the result.
Also, what do you mean by
Do I have to add it in namespace somewhere as I was getting that error only saying it is not in the namespace
It’s need to be namespaced like in my example, see the two lines of code above.
See https://auth0.com/docs/tokens/guides/create-namespaced-custom-claims for docs.
Okay, passing the value in idToken worked, I was passing it in accessToken only. When i added a code to pass it in idToken as well as mentioned in the custom namespaced claim document, it worked. Thank you for your help.
1 Like
This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.