azure-activedirectory-identitymodel-extensions-for-dotnet
azure-activedirectory-identitymodel-extensions-for-dotnet copied to clipboard
AzureAD
[Bug] System.IdentityModel.Tokens.Jwt v6.8.0 to 6.34.0 Signature validation failed
Which version of Microsoft.IdentityModel are you using? System.IdentityModel.Tokens.Jwt 6.8.0
Where is the issue? S.IM.Tokens.Jwt I have spotted this error with output when running tests when validating a JWT token.
Is this a new or an existing app? The app is in production and I have upgraded to a new version of System.IdentityModel.Tokens.Jwt from v6.8.0 to 6.34.0
Expected behavior The validation keeps working after upgrading to latest version. Actual behavior This method ClaimsPrincipal JwtSecurityTokenHandler.ValidateToken(string token, TokenValidationParameters validationParameters, out SecurityToken validatedToken) is used to verify the Signature but the following error is started to appear. Microsoft.IdentityModel.Tokens.SecurityTokenSignatureKeyNotFoundException: 'IDX10517: Signature validation failed. The token's kid is missing. Keys tried: 'Microsoft.IdentityModel.Tokens.SymmetricSecurityKey, Exceptions caught: '[PII of type 'System.Text.StringBuilder' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]'. token: '[PII of type 'System.IdentityModel.Tokens.Jwt.JwtSecurityToken' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]'.
