Many "error = access_denied"

[coronag]

I'm having issues with those : InvokeReplyPathAsync and AuthenticateCoreAsync.

1/ First issue : Sometimes but very often my redirect URI got called with parameter "error=access_denied". I see in InvokeReplyPathAsync that this means "context.Identity" is null but I didn't manage to understand why on two connect tries (same account, same context, same test in fact) I got one correct connect (no problem) and the second after for the same test I got this "context.Identity" which is null. I don't reproduce it locally or on a staging environment but only on production environment which make it harder to debug. Do you know what could make "context.Identity" to be null ? An await/async problem ? A VK api issue ? but why no exception (as if all went well but Identity still null for this issue) ?

2/ Second one : got an exception but no message :(. Kind awkward too, hard to debug. If you have ideas, much appreciated.

Thanks for the help.

[coronag]

Found a possible response : state could be the issue. Not stored (session/cookie) or even passed to vk or even in the redirected uri.

With multiple connect at the same time : how "Options.StoreState" works ? How is it stored / retrieved through requests ?

[coronag]

It seems that giving "state" param to VK "authorize" request resolve my issue. Vk is giving it back to the redirect uri, perfect.

[coronag]

If you want to see with lines of code : https://github.com/sociabble/Duke.Owin.VkontakteMiddleware/commit/4cfacc320e35bd889e4262af57c407dd5ec9340a