IdentityModel.OidcClient icon indicating copy to clipboard operation
IdentityModel.OidcClient copied to clipboard

Check for DPoPNonce with case-insensitive TryGetValues method

Open drasticactions opened this issue 1 year ago • 0 comments

When checking for "DPoP-Nonce," this method checks against the Key value in the headers and uses a string comparison. This can fail because that header, like any other, can be case-insensitive, leading to issues where it can't get the value properly even though it is in the response.

TryGetValues will search for headers regardless of the case. Switching to that here, this method will work in all cases (pardon the pun, it took me hours of debugging to figure out this is what was broken, lol).

drasticactions avatar Sep 08 '24 16:09 drasticactions