Error on missing client secret / certificate

[bbqchickenrobot]

MsalClientException: IDW10104: Both client secret and client certificate cannot be null or whitespace, and only ONE must be included in the configuration of the web app when calling a web API. For instance, in the appsettings.json file. Microsoft.Identity.Web.MicrosoftIdentityOptionsValidation.ValidateEitherClientCertificateOrClientSecret(string clientSecret, IEnumerable<CertificateDescription> cert) Microsoft.Identity.Web.TokenAcquisition.BuildConfidentialClientApplicationAsync() Microsoft.Identity.Web.TokenAcquisition.GetOrBuildConfidentialClientApplicationAsync() Microsoft.Identity.Web.TokenAcquisition.AddAccountToCacheFromAuthorizationCodeAsync(AuthorizationCodeReceivedContext context, IEnumerable scopes) Microsoft.Identity.Web.MicrosoftIdentityWebAppAuthenticationBuilder+<>c__DisplayClass11_1+<<WebAppCallsWebApiImplementation>b__1>d.MoveNext() Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectHandler.RunAuthorizationCodeReceivedEventAsync(OpenIdConnectMessage authorizationResponse, ClaimsPrincipal user, AuthenticationProperties properties, JwtSecurityToken jwt) Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectHandler.HandleRemoteAuthenticateAsync()

Any idea what this could be ? I have passed in the client secret.

[damienbod]

Hi @bbqchickenrobot

You need to create a secret (or certificate) in the Azure App registration and add this to your user secrets

Greetings Damien

[bbqchickenrobot]

Awesome @damienbod - that worked! Thanks for the tip and the tutorial!

[PontusEkengren]

Awesome @damienbod - that worked! Thanks for the tip and the tutorial!

I understand the registration of a secret part. But where did you apply the secret?

[bbqchickenrobot]

In the code in the Starupt.cs and the appsettings.json. Add an "azuread_secret": "my secret". to appsettings and load it during startup

[PontusEkengren]

Thanks, yes i got it now. If anyone else have the same problem as me: dont forget to add your secrets with colon like dotnet user-secrets set "AzureAd:ClientSecret" "secretGoesHere*********************"

When using a depth in the appsettings.json

[Mr-Technician]

Good to know, I was hoping I could avoid using a secret entirely and use the token for the user, but it would seem it doesn't work this way.