asp.net Micorosf Entra IDX10503：签名验证失败,托肯没有孩子Keys尝试：'System.Text.StringBuilder'

hk8txs48 于 2023-10-21 发布在 .NET

关注(0)|答案(1)|浏览(573)

我正在尝试使用Owin通过ASP NET应用程序实现Azure AD身份验证。
我使用的代码如下：

app.SetDefaultSignInAsAuthenticationType(CookieAuthenticationDefaults.AuthenticationType);
            app.UseCookieAuthentication(new CookieAuthenticationOptions());
            app.UseOpenIdConnectAuthentication(
                new OpenIdConnectAuthenticationOptions
                {
                    ClientId = clientId,
                    Authority = authority,
                    RedirectUri = redirectUri,
                    PostLogoutRedirectUri = redirectUri,
                    Scope = OpenIdConnectScope.OpenId,
                    ResponseType = OpenIdConnectResponseType.CodeIdToken,
                    Notifications = new OpenIdConnectAuthenticationNotifications
                    {
                        AuthenticationFailed = OnAuthenticationFailed,
                        AuthorizationCodeReceived = OnAuthorizationCodeReceived,
                    }
                }
            );

我得到以下错误：IDX10503: Signature validation failed. Token does not have a kid. Keys tried: 'System.Text.StringBuilder'
我检查了代币，孩子在里面。根据：https://learn.microsoft.com/en-us/azure/active-directory/develop/signing-key-rollover，NET OWIN OpenID Connect已经具有自动处理密钥翻转的必要逻辑。

asp.net

来源：https://stackoverflow.com/questions/77300236/micorosf-entra-idx10503-signature-validation-failed-token-does-not-have-a-kid

1条答案

按热度按时间

fdbelqdn1#

错误消息IDX10503: Signature validation failed. Token does not have a kid. Keys tried: 'System.Text.StringBuilder'表示正在验证的JSON Web Token（JWT）缺少kid（密钥标识符）声明，这对于标识用于签名JWT的密钥至关重要。
要解决这个问题，可以使用OpenIdConnectAuthenticationOptions类，它的特点是在令牌验证后触发SecurityTokenValidated事件。在事件处理程序中，您可以使用其他声明（如ClaimTypes.Name声明）来增强标识。

app.UseOpenIdConnectAuthentication(
  new OpenIdConnectAuthenticationOptions
      {
          ClientId = clientId,
          Authority = authority,
          PostLogoutRedirectUri = postLogoutRedirectUri,
           Notifications = new OpenIdConnectAuthenticationNotifications()
           {
            SecurityTokenValidated = (context) =>
             {
               string name = context.AuthenticationTicket.Identity.FindFirst("preferred_username").Value;
                context.AuthenticationTicket.Identity.AddClaim(new Claim(ClaimTypes.Name, name, string.Empty));
                return System.Threading.Tasks.Task.FromResult(0);
                    }
                }
         });
                 
 }

请确保您已安装以下软件包

Install-Package Microsoft.Owin  
Install-Package Microsoft.Owin.Security.OpenIdConnect  
Install-Package Microsoft.Owin.Security.Cookies  
Install-Package Microsoft.Owin.Host.SystemWeb  
Install-Package Microsoft.IdentityModel.Protocol.Extensions  
Install-Package System.IdentityModel.Tokens.Jwt

结果

展开查看全部

赞(0）回复(0）举报 2023-10-21

我来回答

asp.net Micorosf Entra IDX10503：签名验证失败,托肯没有孩子Keys尝试：'System.Text.StringBuilder'

1条答案

相关问题

热门标签

最新问答