detailed error message for admin

# Conflicts:
#	src/Backend/Jp.UserManagement/Configuration/ConfigurePolicy.cs
#	src/Frontend/Jp.UI.SSO/Views/Home/Index.cshtml

Author: brunobritodev

src/Backend/Jp.UserManagement/Configuration/ConfigurePolicy.cs

@@ -1,4 +1,5 @@
 using IdentityServer4.Extensions;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.Extensions.DependencyInjection;
 
 namespace Jp.Management.Configuration
@@ -9,16 +10,16 @@ public static void AddPolicies(this IServiceCollection services)
         {
             services.AddAuthorization(options =>
             {
-                options.AddPolicy("Admin",
-                    policy => policy.RequireAssertion(c =>
-                        c.User.HasClaim("is4-rights", "manager") ||
-                        c.User.IsInRole("Administrador")));
+                options.AddPolicy("Admin", 
+                    policy => policy.RequireAssertion(c => 
+                        c.User.HasClaim("is4-rights", "manager") || 
+                        c.User.IsInRole("Administrator")));
 
                 options.AddPolicy("ReadOnly", policy =>
-                    policy.RequireAssertion(c =>
-                        c.User.IsAuthenticated() ||
-                        c.User.HasClaim("is4-rights", "manager") ||
-                        c.User.IsInRole("Administrador")));
+                    policy.RequireAssertion(c => 
+                        c.User.IsAuthenticated() || 
+                        c.User.HasClaim("is4-rights", "manager") || 
+                        c.User.IsInRole("Administrator")));
 
                 options.AddPolicy("UserManagement", policy =>
                     policy.RequireAuthenticatedUser());

src/Backend/Jp.UserManagement/jpProject_sso_log.txt

@@ -28043,7 +28043,7 @@ WHERE `userrole`.`RoleId` = @__role_Id_0
 2018-10-10 10:14:14.630 -03:00 [INF] Successfully validated the token.
 2018-10-10 10:14:14.633 -03:00 [DBG] AuthenticationScheme: Bearer was successfully authenticated.
 2018-10-10 10:14:14.643 -03:00 [INF] Route matched with {action = "Details", controller = "Roles"}. Executing action Jp.Management.Controllers.RolesController.Details (Jp.Management)
-2018-10-10 10:14:14.648 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrador"]) - Validation state: "Valid"
+2018-10-10 10:14:14.648 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrator"]) - Validation state: "Valid"
 2018-10-10 10:14:14.657 -03:00 [INF] Entity Framework Core 2.1.2-rtm-30932 initialized 'ApplicationDbContext' using provider 'Pomelo.EntityFrameworkCore.MySql' with options: MigrationsAssembly=Jp.Infra.Migrations.MySql.Identity 
 2018-10-10 10:14:14.670 -03:00 [INF] Executed DbCommand (1ms) [Parameters=[@__name_0='?' (Size = 256)], CommandType='"Text"', CommandTimeout='30']
 SELECT `f`.`Id`, `f`.`ConcurrencyStamp`, `f`.`Name`, `f`.`NormalizedName`
@@ -29545,7 +29545,7 @@ FROM `Roles` AS `r`
 2018-10-10 12:23:15.180 -03:00 [INF] Successfully validated the token.
 2018-10-10 12:23:15.184 -03:00 [DBG] AuthenticationScheme: Bearer was successfully authenticated.
 2018-10-10 12:23:15.190 -03:00 [INF] Route matched with {action = "Details", controller = "Roles"}. Executing action Jp.Management.Controllers.RolesController.Details (Jp.Management)
-2018-10-10 12:23:15.195 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrador"]) - Validation state: "Valid"
+2018-10-10 12:23:15.195 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrator"]) - Validation state: "Valid"
 2018-10-10 12:23:15.201 -03:00 [INF] Entity Framework Core 2.1.2-rtm-30932 initialized 'ApplicationDbContext' using provider 'Pomelo.EntityFrameworkCore.MySql' with options: MigrationsAssembly=Jp.Infra.Migrations.MySql.Identity 
 2018-10-10 12:23:15.214 -03:00 [INF] Executed DbCommand (1ms) [Parameters=[@__name_0='?' (Size = 256)], CommandType='"Text"', CommandTimeout='30']
 SELECT `f`.`Id`, `f`.`ConcurrencyStamp`, `f`.`Name`, `f`.`NormalizedName`
@@ -43525,7 +43525,7 @@ FROM `Roles` AS `r`
 2018-10-12 11:32:10.866 -03:00 [DBG] AuthenticationScheme: Bearer was successfully authenticated.
 2018-10-12 11:32:10.872 -03:00 [INF] Route matched with {action = "Details", controller = "Roles"}. Executing action Jp.Management.Controllers.RolesController.Details (Jp.Management)
 2018-10-12 11:32:10.876 -03:00 [INF] Authorization was successful.
-2018-10-12 11:32:10.879 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrador"]) - Validation state: "Valid"
+2018-10-12 11:32:10.879 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrator"]) - Validation state: "Valid"
 2018-10-12 11:32:10.886 -03:00 [INF] Entity Framework Core 2.1.2-rtm-30932 initialized 'ApplicationDbContext' using provider 'Pomelo.EntityFrameworkCore.MySql' with options: MigrationsAssembly=Jp.Infra.Migrations.MySql.Identity 
 2018-10-12 11:32:10.898 -03:00 [INF] Executed DbCommand (1ms) [Parameters=[@__name_0='?' (Size = 256)], CommandType='"Text"', CommandTimeout='30']
 SELECT `f`.`Id`, `f`.`ConcurrencyStamp`, `f`.`Name`, `f`.`NormalizedName`
@@ -43579,7 +43579,7 @@ FROM `Roles` AS `r`
 2018-10-12 11:33:25.653 -03:00 [DBG] AuthenticationScheme: Bearer was successfully authenticated.
 2018-10-12 11:33:25.657 -03:00 [INF] Route matched with {action = "Details", controller = "Roles"}. Executing action Jp.Management.Controllers.RolesController.Details (Jp.Management)
 2018-10-12 11:33:25.661 -03:00 [INF] Authorization was successful.
-2018-10-12 11:33:25.665 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrador"]) - Validation state: "Valid"
+2018-10-12 11:33:25.665 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrator"]) - Validation state: "Valid"
 2018-10-12 11:33:25.669 -03:00 [INF] Entity Framework Core 2.1.2-rtm-30932 initialized 'ApplicationDbContext' using provider 'Pomelo.EntityFrameworkCore.MySql' with options: MigrationsAssembly=Jp.Infra.Migrations.MySql.Identity 
 2018-10-12 11:33:25.682 -03:00 [INF] Executed DbCommand (1ms) [Parameters=[@__name_0='?' (Size = 256)], CommandType='"Text"', CommandTimeout='30']
 SELECT `f`.`Id`, `f`.`ConcurrencyStamp`, `f`.`Name`, `f`.`NormalizedName`
@@ -45310,7 +45310,7 @@ WHERE `userrole`.`RoleId` = @__role_Id_0
 2018-10-12 12:13:21.268 -03:00 [DBG] AuthenticationScheme: Bearer was successfully authenticated.
 2018-10-12 12:13:21.272 -03:00 [INF] Route matched with {action = "Details", controller = "Roles"}. Executing action Jp.Management.Controllers.RolesController.Details (Jp.Management)
 2018-10-12 12:13:21.277 -03:00 [INF] Authorization was successful.
-2018-10-12 12:13:21.281 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrador"]) - Validation state: "Valid"
+2018-10-12 12:13:21.281 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrator"]) - Validation state: "Valid"
 2018-10-12 12:13:21.287 -03:00 [INF] Entity Framework Core 2.1.2-rtm-30932 initialized 'ApplicationDbContext' using provider 'Pomelo.EntityFrameworkCore.MySql' with options: MigrationsAssembly=Jp.Infra.Migrations.MySql.Identity 
 2018-10-12 12:13:21.301 -03:00 [INF] Executed DbCommand (2ms) [Parameters=[@__name_0='?' (Size = 256)], CommandType='"Text"', CommandTimeout='30']
 SELECT `f`.`Id`, `f`.`ConcurrencyStamp`, `f`.`Name`, `f`.`NormalizedName`
@@ -45345,7 +45345,7 @@ FROM `Roles` AS `r`
 2018-10-12 12:13:25.392 -03:00 [DBG] AuthenticationScheme: Bearer was successfully authenticated.
 2018-10-12 12:13:25.397 -03:00 [INF] Route matched with {action = "Details", controller = "Roles"}. Executing action Jp.Management.Controllers.RolesController.Details (Jp.Management)
 2018-10-12 12:13:25.404 -03:00 [INF] Authorization was successful.
-2018-10-12 12:13:25.408 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrador"]) - Validation state: "Valid"
+2018-10-12 12:13:25.408 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrator"]) - Validation state: "Valid"
 2018-10-12 12:13:25.413 -03:00 [INF] Entity Framework Core 2.1.2-rtm-30932 initialized 'ApplicationDbContext' using provider 'Pomelo.EntityFrameworkCore.MySql' with options: MigrationsAssembly=Jp.Infra.Migrations.MySql.Identity 
 2018-10-12 12:13:25.422 -03:00 [INF] Executed DbCommand (1ms) [Parameters=[@__name_0='?' (Size = 256)], CommandType='"Text"', CommandTimeout='30']
 SELECT `f`.`Id`, `f`.`ConcurrencyStamp`, `f`.`Name`, `f`.`NormalizedName`
@@ -46373,7 +46373,7 @@ FROM `Roles` AS `r`
 2018-10-12 12:27:27.399 -03:00 [DBG] AuthenticationScheme: Bearer was successfully authenticated.
 2018-10-12 12:27:27.402 -03:00 [INF] Route matched with {action = "Details", controller = "Roles"}. Executing action Jp.Management.Controllers.RolesController.Details (Jp.Management)
 2018-10-12 12:27:27.406 -03:00 [INF] Authorization was successful.
-2018-10-12 12:27:27.409 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrador"]) - Validation state: "Valid"
+2018-10-12 12:27:27.409 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrator"]) - Validation state: "Valid"
 2018-10-12 12:27:27.413 -03:00 [INF] Entity Framework Core 2.1.2-rtm-30932 initialized 'ApplicationDbContext' using provider 'Pomelo.EntityFrameworkCore.MySql' with options: MigrationsAssembly=Jp.Infra.Migrations.MySql.Identity 
 2018-10-12 12:27:27.425 -03:00 [INF] Executed DbCommand (3ms) [Parameters=[@__name_0='?' (Size = 256)], CommandType='"Text"', CommandTimeout='30']
 SELECT `f`.`Id`, `f`.`ConcurrencyStamp`, `f`.`Name`, `f`.`NormalizedName`
@@ -46405,7 +46405,7 @@ FROM `Roles` AS `r`
 2018-10-12 12:27:29.563 -03:00 [DBG] AuthenticationScheme: Bearer was successfully authenticated.
 2018-10-12 12:27:29.567 -03:00 [INF] Route matched with {action = "Details", controller = "Roles"}. Executing action Jp.Management.Controllers.RolesController.Details (Jp.Management)
 2018-10-12 12:27:29.573 -03:00 [INF] Authorization was successful.
-2018-10-12 12:27:29.578 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrador"]) - Validation state: "Valid"
+2018-10-12 12:27:29.578 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrator"]) - Validation state: "Valid"
 2018-10-12 12:27:29.584 -03:00 [INF] Entity Framework Core 2.1.2-rtm-30932 initialized 'ApplicationDbContext' using provider 'Pomelo.EntityFrameworkCore.MySql' with options: MigrationsAssembly=Jp.Infra.Migrations.MySql.Identity 
 2018-10-12 12:27:29.595 -03:00 [INF] Executed DbCommand (1ms) [Parameters=[@__name_0='?' (Size = 256)], CommandType='"Text"', CommandTimeout='30']
 SELECT `f`.`Id`, `f`.`ConcurrencyStamp`, `f`.`Name`, `f`.`NormalizedName`
@@ -48282,7 +48282,7 @@ WHERE `userrole`.`RoleId` = @__role_Id_0
 2018-10-13 00:47:04.652 -03:00 [DBG] AuthenticationScheme: Bearer was successfully authenticated.
 2018-10-13 00:47:04.659 -03:00 [INF] Route matched with {action = "Details", controller = "Roles"}. Executing action Jp.Management.Controllers.RolesController.Details (Jp.Management)
 2018-10-13 00:47:04.665 -03:00 [INF] Authorization was successful.
-2018-10-13 00:47:04.670 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrador"]) - Validation state: "Valid"
+2018-10-13 00:47:04.670 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrator"]) - Validation state: "Valid"
 2018-10-13 00:47:04.678 -03:00 [INF] Entity Framework Core 2.1.2-rtm-30932 initialized 'ApplicationDbContext' using provider 'Pomelo.EntityFrameworkCore.MySql' with options: MigrationsAssembly=Jp.Infra.Migrations.MySql.Identity 
 2018-10-13 00:47:04.692 -03:00 [INF] Executed DbCommand (1ms) [Parameters=[@__name_0='?' (Size = 256)], CommandType='"Text"', CommandTimeout='30']
 SELECT `f`.`Id`, `f`.`ConcurrencyStamp`, `f`.`Name`, `f`.`NormalizedName`
@@ -48505,7 +48505,7 @@ WHERE `userrole`.`RoleId` = @__role_Id_0
 2018-10-13 00:47:44.831 -03:00 [DBG] AuthenticationScheme: Bearer was successfully authenticated.
 2018-10-13 00:47:44.835 -03:00 [INF] Route matched with {action = "Details", controller = "Roles"}. Executing action Jp.Management.Controllers.RolesController.Details (Jp.Management)
 2018-10-13 00:47:44.840 -03:00 [INF] Authorization was successful.
-2018-10-13 00:47:44.844 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrador"]) - Validation state: "Valid"
+2018-10-13 00:47:44.844 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrator"]) - Validation state: "Valid"
 2018-10-13 00:47:44.850 -03:00 [INF] Entity Framework Core 2.1.2-rtm-30932 initialized 'ApplicationDbContext' using provider 'Pomelo.EntityFrameworkCore.MySql' with options: MigrationsAssembly=Jp.Infra.Migrations.MySql.Identity 
 2018-10-13 00:47:44.863 -03:00 [INF] Executed DbCommand (1ms) [Parameters=[@__name_0='?' (Size = 256)], CommandType='"Text"', CommandTimeout='30']
 SELECT `f`.`Id`, `f`.`ConcurrencyStamp`, `f`.`Name`, `f`.`NormalizedName`
@@ -56113,7 +56113,7 @@ WHERE `userrole`.`RoleId` = @__role_Id_0
 2018-10-13 03:44:50.956 -03:00 [DBG] AuthenticationScheme: Bearer was successfully authenticated.
 2018-10-13 03:44:50.963 -03:00 [INF] Route matched with {action = "Details", controller = "Roles"}. Executing action Jp.Management.Controllers.RolesController.Details (Jp.Management)
 2018-10-13 03:44:50.973 -03:00 [INF] Authorization was successful.
-2018-10-13 03:44:50.981 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrador"]) - Validation state: "Valid"
+2018-10-13 03:44:50.981 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrator"]) - Validation state: "Valid"
 2018-10-13 03:44:50.992 -03:00 [INF] Entity Framework Core 2.1.2-rtm-30932 initialized 'ApplicationDbContext' using provider 'Pomelo.EntityFrameworkCore.MySql' with options: MigrationsAssembly=Jp.Infra.Migrations.MySql.Identity 
 2018-10-13 03:44:51.009 -03:00 [INF] Executed DbCommand (1ms) [Parameters=[@__name_0='?' (Size = 256)], CommandType='"Text"', CommandTimeout='30']
 SELECT `f`.`Id`, `f`.`ConcurrencyStamp`, `f`.`Name`, `f`.`NormalizedName`
@@ -57196,7 +57196,7 @@ WHERE `userrole`.`RoleId` = @__role_Id_0
 2018-10-13 10:10:13.462 -03:00 [DBG] AuthenticationScheme: Bearer was successfully authenticated.
 2018-10-13 10:10:13.469 -03:00 [INF] Route matched with {action = "Details", controller = "Roles"}. Executing action Jp.Management.Controllers.RolesController.Details (Jp.Management)
 2018-10-13 10:10:13.475 -03:00 [INF] Authorization was successful.
-2018-10-13 10:10:13.479 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrador"]) - Validation state: "Valid"
+2018-10-13 10:10:13.479 -03:00 [INF] Executing action method Jp.Management.Controllers.RolesController.Details (Jp.Management) with arguments (["Administrator"]) - Validation state: "Valid"
 2018-10-13 10:10:13.487 -03:00 [INF] Entity Framework Core 2.1.2-rtm-30932 initialized 'ApplicationDbContext' using provider 'Pomelo.EntityFrameworkCore.MySql' with options: MigrationsAssembly=Jp.Infra.Migrations.MySql.Identity 
 2018-10-13 10:10:13.501 -03:00 [INF] Executed DbCommand (1ms) [Parameters=[@__name_0='?' (Size = 256)], CommandType='"Text"', CommandTimeout='30']
 SELECT `f`.`Id`, `f`.`ConcurrencyStamp`, `f`.`Name`, `f`.`NormalizedName`

src/Frontend/Jp.UI.SSO/Controllers/Home/ErrorViewModel.cs

@@ -9,5 +9,8 @@ namespace Jp.UI.SSO.Controllers.Home
     public class ErrorViewModel
     {
         public ErrorMessage Error { get; set; }
+        public string ErrorMessage { get; set; }
+        public string ErrorDescription { get; set; }
+        public string RequestId { get; set; }
     }
 }

src/Frontend/Jp.UI.SSO/Controllers/Home/HomeController.cs

@@ -1,5 +1,6 @@
 using IdentityServer4.Models;
 using IdentityServer4.Services;
+using Microsoft.AspNetCore.Hosting;
 using Microsoft.AspNetCore.Http;
 using Microsoft.AspNetCore.Localization;
 using Microsoft.AspNetCore.Mvc;
@@ -10,10 +11,12 @@ namespace Jp.UI.SSO.Controllers.Home
     public class HomeController : Controller
     {
         private readonly IIdentityServerInteractionService _interaction;
+        private readonly IHostingEnvironment _hostingEnvironment;
 
-        public HomeController(IIdentityServerInteractionService interaction)
+        public HomeController(IIdentityServerInteractionService interaction, IHostingEnvironment hostingEnvironment)
         {
             _interaction = interaction;
+            _hostingEnvironment = hostingEnvironment;
         }
 
         [ResponseCache(Location = ResponseCacheLocation.Client, NoStore = true)]
@@ -34,6 +37,9 @@ public async Task<IActionResult> Error(string errorId)
             if (message != null)
             {
                 vm.Error = message;
+                vm.ErrorMessage = vm?.Error?.Error;
+                vm.ErrorDescription = User.IsInRole("Administrator") || _hostingEnvironment.IsDevelopment() ? vm?.Error?.ErrorDescription : null;
+                vm.RequestId = vm?.Error?.RequestId;
             }
 
             return View("Error", vm);
@@ -49,6 +55,9 @@ public IActionResult LoginError(string error)
             if (error != null)
             {
                 vm.Error = new ErrorMessage() { ErrorDescription = error, Error = "1000" };
+                vm.ErrorMessage = vm?.Error?.Error;
+                vm.ErrorDescription = User.IsInRole("Administrator") ? vm?.Error?.ErrorDescription : null;
+                vm.RequestId = vm?.Error?.RequestId;
             }
 
             return View("Error", vm);

src/Frontend/Jp.UI.SSO/Util/DbMigrationHelpers.cs

@@ -60,9 +60,9 @@ private static async Task EnsureSeedIdentityData(
         {
 
             // Create admin role
-            if (!await roleManager.RoleExistsAsync("Administrador"))
+            if (!await roleManager.RoleExistsAsync("Administrator"))
             {
-                var role = new UserIdentityRole { Name = "Administrador" };
+                var role = new UserIdentityRole { Name = "Administrator" };
 
                 await roleManager.CreateAsync(role);
             }
@@ -85,7 +85,7 @@ private static async Task EnsureSeedIdentityData(
                 await userManager.AddClaimAsync(user, new Claim("is4-rights", "manager"));
                 await userManager.AddClaimAsync(user, new Claim("username", Users.GetUser(configuration)));
                 await userManager.AddClaimAsync(user, new Claim("email", Users.GetEmail(configuration)));
-                await userManager.AddToRoleAsync(user, "Administrador");
+                await userManager.AddToRoleAsync(user, "Administrator");
             }
         }