Asp.Net Zero中登录成功后AbpSession.UserId返回null的问题求助

Hey there, let's tackle this annoying issue you're facing with Asp.Net Zero (based on ABP) where login succeeds but the auth guard kicks you back to the login page because AbpSession.UserId is null—especially on some Chrome machines and all IE ones. This is almost always related to how session state is persisted or loaded across browsers, so here's a step-by-step breakdown of fixes to try:

Chrome 80+ defaults to SameSite=Lax, and IE has limited support for the SameSite attribute, which can break auth cookie persistence.

• In your backend Startup.cs, update the cookie auth configuration to be cross-browser friendly:

  services.ConfigureApplicationCookie(options =>
  {
      // Unspecified works for both IE and modern Chrome
      options.Cookie.SameSite = SameSiteMode.Unspecified;
      // Auto-adjust secure policy based on request protocol
      options.Cookie.SecurePolicy = CookieSecurePolicy.SameAsRequest;
      // Ensure cookie persists beyond the browser session
      options.Cookie.Expiration = TimeSpan.FromDays(7);
  });
  

Often the auth guard runs before ABP finishes loading the session state, leading to a null UserId.

• Modify your auth-guard.service.ts to use the async version of getUserId() to ensure we wait for the session to load:

  canActivate(route: ActivatedRouteSnapshot, state: RouterStateSnapshot): Observable<boolean> {
      return this.abpSession.getUserId().pipe(
          switchMap(userId => {
              if (userId) {
                  return of(true);
              } else {
                  this.router.navigate(['account/login'], { queryParams: { returnUrl: state.url } });
                  return of(false);
              }
          }),
          catchError(() => {
              this.router.navigate(['account/login'], { queryParams: { returnUrl: state.url } });
              return of(false);
          })
      );
  }
  

IE has strict limitations on LocalStorage (especially in privacy mode or untrusted sites), and Asp.Net Zero might default to LocalStorage. Switch to cookies for IE:

• In your frontend app.module.ts, update the ABP configuration to use cookie storage:

  AbpModule.forRoot({
      auth: {
          storage: 'cookie' // Prioritize cookies over LocalStorage
      }
  })
  

• Also, guide IE users to add your site to their Trusted Sites in Internet Options to ensure cookies are allowed.

Some Chrome users may have modified cookie settings (like blocking third-party cookies or using "Only while you're using the site") which breaks persistence:

• Ask users to verify Chrome settings: Settings > Privacy and security > Cookies and other site data, and ensure your site's cookies are allowed.
• The backend cookie expiration setting from step 1 will also help here by creating a persistent cookie instead of a session-only one.

Sometimes the frontend doesn't sync the session state immediately after login, so the auth guard reads an old null value.

• In your login.component.ts, add a session refresh before navigating to the app:

  // After successful login API call
  this.abpSession.refresh().then(() => {
      this.router.navigate(['/']); // Navigate only after session is refreshed
  });
  

内容的提问来源于stack exchange，提问作者vaqifrv