Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Meaningless error when using both Microsoft.AspNetCore.Authentication.OpenIdConnect 8.0.4 and System.IdentityModel.Tokens.Jwt 7.5.0 or higher #55194

Open
1 task done
CunesPoort8 opened this issue Apr 18, 2024 · 2 comments
Labels
area-security Needs: Attention 👋 This issue needs the attention of a contributor, typically because the OP has provided an update. Needs: Repro Indicates that the team needs a repro project to continue the investigation on this issue

Comments

@CunesPoort8
Copy link

CunesPoort8 commented Apr 18, 2024

Is there an existing issue for this?

  • I have searched the existing issues

Describe the bug

When using the Microsoft.AspNetCore.Authentication.OpenIdConnect package version 8.04 and the System.IdentityModel.Tokens.Jwt package version 7.5.0 or higher, a meaningless error arises not pointing in the direction of the cause.

Screenshot 2024-04-18 at 09 57 14

All works well when the System.IdentityModel.Tokens.Jwt package is deleted and the Microsoft.AspNetCore.Authentication.OpenIdConnect package uses its default 7.1.2 version.

Expected Behavior

A working login procedure with up to date System.IdentityModel.Tokens.Jwt package. Please add support for this package in the latest Microsoft.AspNetCore.Authentication.OpenIdConnect package.

Steps To Reproduce

Install both packages and perform an open id connect login procedure with only a Authority set, so the Open ID connect middleware will figure out it's configuration from the .well-known/openid-configuration endpoint.

See https://github.com/POORT8/AspNetCore.Repro.55194 for a minimal reproduction repo.

Exceptions (if any)

No response

.NET Version

.NET 8

Anything else?

No response

@utarn
Copy link

utarn commented Apr 19, 2024

I also got this error when upgrading from Microsoft.AspNetCore.Authentication.OpenIdConnect 8.0.2 to Microsoft.AspNetCore.Authentication.OpenIdConnect 8.0.4

@SteveSandersonMS SteveSandersonMS added the Needs: Repro Indicates that the team needs a repro project to continue the investigation on this issue label Apr 30, 2024
@dotnet-policy-service dotnet-policy-service bot added the Needs: Author Feedback The author of this issue needs to respond in order for us to continue investigating this issue. label Apr 30, 2024
@CunesPoort8
Copy link
Author

The minimal repro project can be found here: https://github.com/POORT8/AspNetCore.Repro.55194

@dotnet-policy-service dotnet-policy-service bot added Needs: Attention 👋 This issue needs the attention of a contributor, typically because the OP has provided an update. and removed Needs: Author Feedback The author of this issue needs to respond in order for us to continue investigating this issue. labels May 3, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area-security Needs: Attention 👋 This issue needs the attention of a contributor, typically because the OP has provided an update. Needs: Repro Indicates that the team needs a repro project to continue the investigation on this issue
Projects
None yet
Development

No branches or pull requests

3 participants