Issues after authentication page

[lla23]

I experience all sorts of issues after I have logged in with e-mail address and pw. The page sometimes doesn't come back, it's bouncing between microsoft authentication website and the application. Sometimes it comes back with message "Error. We're having trouble logging you in" with no more explanation. this time I get the same with following explanation: "IDX21323: RequireNonce is '[PII is hidden by default. Set the 'ShowPII' flag in IdentityModelEventSource.cs to true to reveal it.]'. OpenIdConnectProtocolValidationContext.Nonce was null, OpenIdConnectProtocol.ValidatedIdToken.Payload.Nonce was not null. The nonce cannot be validated. If you don't need to check the nonce, set OpenIdConnectProtocolValidator.RequireNonce to 'false'. Note if a 'nonce' is found it will be evaluated.". On the other hand, I see my user name in the above right-hand menu and "Sign out" next to it, indicating I'm logged in.

[lla23]

This error seems to be only on the To-do List page, not on the claims page

[lla23]

[lla23]

Sometimes the error is directly on the sign-up sign-in page. I found the code to continuously loop in the fillowing:
public void SignUpSignIn() { // Use the default policy to process the sign up / sign in flow if (!Request.IsAuthenticated) { HttpContext.GetOwinContext().Authentication.Challenge(); return; }

[lla23]

Browser keeps bouncong on the following request, is there something wrong with it?
https://login.microsoftonline.com/te/mytenant.onmicrosoft.com/b2c_1_signupin/oauth2/v2.0/authorize ?client_id=b290ee9e-550a-4578-aeb7-1c8b7826b4d9 &redirect_uri=https%3A%2F%2Fauth-webapp.azurewebsites.net%2F &response_mode=form_post &response_type=code%20id_token &scope=openid%20profile%20offline_access%20https%3A%2F%2Fmytenant.onmicrosoft.com%2Fdemoapinative%2Fread%20https%3A%2F%2Fmytenant.onmicrosoft.com%2Fdemoapinative%2Fwrite &state=OpenIdConnect.AuthenticationProperties%3DJ-9H1r-E0UcLK3hPiG5f7QvEPAo2xcqXWCimSiXQF2aSLVIw7PBhe9jByunGE-7ddNrxuiRpmgtF_BhdvjEo4xP2u-xJZYoRK5Kn-XZRCIR83GtQFln5UOPGhNyxPbmkpQJszEYdQpzclIC9K4RirjgMZiq-JcfMzOaCHyGvoGfsxt4PKQvd7GIMaMnEIzw_b-22YfnHNAREM4NFiOWcO5XvEy8i7m3BePSfU90foCR2b77Q_Ae0SRQZUEYmMCpFbsbGjsdTbv5LPIsjisqqLg &nonce=636598940997696337.ZjA2YTM5YmQtMTRjOS00OGEzLWFjNTUtZjFjZDEyMmNjYzRkMjkxMDY1OWEtY2VlNC00YzY4LTk4YjctYTZmZTNhYzE3NWQx &x-client-SKU=ID_NET451 &x-client-ver=5.2.1.0

[poebrand]

Seems like this is related to: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#915

[Turbo549]

If your B2C policy names are actually mixed case (e.g. B2C_1_SignUpIn), you might be experiencing this. I issued pull request #119 that addresses that case.