IdentityServer4.Admin icon indicating copy to clipboard operation
IdentityServer4.Admin copied to clipboard

Content Security-Policiy

Open iCoder1 opened this issue 3 years ago • 3 comments

Admin Project - version 2.0

I am trying to publish Admin in Azure. It creates database successfully, also STS is already published, up and running correctly, which means I can login and logout with admin user.

But, when Admin is trying to re-direct or load, it is showing this error

invalid_request

In network tab, I see this

default-src 'self' www.gravatar.com fonts.googleapis.com fonts.gstatic.com;script-src 'self' 'unsafe-inline' www.gravatar.com fonts.googleapis.com fonts.gstatic.com;style-src 'self' 'unsafe-inline' www.gravatar.com fonts.googleapis.com fonts.gstatic.com;img-src 'self' www.gravatar.com fonts.googleapis.com fonts.gstatic.com;font-src 'self' www.gravatar.com fonts.googleapis.com fonts.gstatic.com

Can anyone help.

Thank you

iCoder1 avatar Jun 28 '21 12:06 iCoder1

Did you ever resolve this? I am wondering if CSP is a red-herring and there might be something different. I am getting all of that in Network Tab too.

I've run my set up locally, deployed to Azure. I can bring up the API and the STS. Opening the Admin, I get redirected to the STS with the Invalid_Request. along with a request id.

I pointed my local setup to the Azure Admin and it worked.

My thought has been something is not right with the Key that I generated using the Azure Guide provied. The Thumb Print in JWKS matches what azure is telling (although the JWKS has appended "RS256" so the thumb print doesn't match (ish).

ChuckBryan avatar Sep 03 '21 18:09 ChuckBryan

Same issue. Did you fix it?

laika1234 avatar Dec 15 '21 11:12 laika1234

Admin Project - version 2.0

I am trying to publish Admin in Azure. It creates database successfully, also STS is already published, up and running correctly, which means I can login and logout with admin user.

But, when Admin is trying to re-direct or load, it is showing this error

invalid_request

In network tab, I see this

default-src 'self' www.gravatar.com fonts.googleapis.com fonts.gstatic.com;script-src 'self' 'unsafe-inline' www.gravatar.com fonts.googleapis.com fonts.gstatic.com;style-src 'self' 'unsafe-inline' www.gravatar.com fonts.googleapis.com fonts.gstatic.com;img-src 'self' www.gravatar.com fonts.googleapis.com fonts.gstatic.com;font-src 'self' www.gravatar.com fonts.googleapis.com fonts.gstatic.com

Can anyone help.

Thank you

hello dear ,I have this problem can u help me to fix this?do u solve the problem ?

miladganji avatar Jun 11 '22 09:06 miladganji