Localhost - The antiforgery token could not be decrypted.

[juanan]

I noticed that after always restarting my local web server, only the first time I access to my account controller login view I get the error:

An exception was thrown while deserializing the token.

The antiforgery token could not be decrypted.
The key {xxx} was not found in the key ring.

how can avoid this pls?

My project is asp.net core 3.1

[javiercn]

@juanan thanks for contacting us.

Are you running inside a container or on Linux?

The default configuration in those cases is to use an ephemeral key ring (you should see a warning on the console) but you can switch to use a certificate and store the keys in the file system. See here for details

[javiercn]

/cc: @blowdart in case you want to add anything else.

[juanan]

Hi @javiercn ,

no, I don't use any container nor in Linux, just a normal asp.net core 3.1 running on my local IIS.

I don't have any data protection stuff configured since I thought it was not necessary.

[davidfowl]

How many instances of the application are running?

[juanan]

Only one instance, its always after I run "iisreset" and access only the first time to my account controller (which has a post action decorated with ValidateAntiForgeryToken.

[blowdart]

What's in your log files? When the app starts you should see some output from data protection which tells you were the keyring is.

[juanan]

I will enable the logs with i.e. serilog and will back to you.