c# - ASP.Net 5 - OAuth bearer token (JWT) validation error -


i have been working on system authenticate , authorize users on website using json web tokens. system completed, running error when attempt use [authorize("bearer")] attribute in code. error follows:

system.identitymodel.tokens.securitytokeninvalidsignatureexception occurred message: exception thrown: 'system.identitymodel.tokens.securitytokeninvalidsignatureexception' in microsoft.identitymodel.logging.dll additional information: idx10503: signature validation failed. keys tried: ''. exceptions caught: ''. token: '{"typ":"jwt","alg":"rs256","kid":null}.{"nameid":"6581f5a0-1775-4ce4-8650-a3d7e613b216","unique_name":"alex","aspnet.identity.securitystamp":"8da933c3-0f88-42ea-876d-c07e99d1eecc","iss":"uniti","aud":"uniti","exp":1436849284,"nbf":1436845684}'

i don't understand why isn't testing keys jwt. have rsa key defined in startup file. without further dragging on, have provided code may necessary solve error below.

my startup code (generating key , oauthbearer options):

#region rsa key generation          var rsa = new rsacryptoserviceprovider(2048);         var rsakey = rsa.exportparameters(true);         var key = new rsasecuritykey(rsakey);          services.addinstance(new signingcredentials(key, securityalgorithms.rsasha256signature, securityalgorithms.sha256digest));          #endregion          services.addinstance(new oauthbearerauthenticationoptions         {             securitytokenvalidators = new list<isecuritytokenvalidator>             {                 new jwtsecuritytokenhandler()             },             tokenvalidationparameters = new tokenvalidationparameters             {                 issuersigningkey = key,                 validissuer = "uniti",                 validaudience = "uniti"             },         });          services.addauthorization();         services.configureauthorization(auth =>         {             auth.addpolicy("bearer", builder =>             {                 builder.addauthenticationschemes(oauthbearerauthenticationdefaults.authenticationscheme);                 builder.requireauthenticateduser();             });         });

my token generation code:

var claimsidentity = (claimsidentity) user.identity;              var handler = beareroptions.securitytokenvalidators.oftype<jwtsecuritytokenhandler>().first();             var securitytoken = handler.createtoken(                 issuer: "uniti",                 audience: "uniti",                 signingcredentials: bearercredentials,                 subject: claimsidentity                 );              var token = handler.writetoken(securitytoken);

am forgetting add somewhere, or generating keys incorrectly? ahead of time if can me!

i bet it's due incorrect way of registering oauth2 bearer options, explained in previous answer: https://stackoverflow.com/a/31322654/542757

services.addinstance(new oauthbearerauthenticationoptions());

when use services.addinstance, oauth2 bearer middleware unable retrieve options (and thus, key), internally uses ioptions<oauthbearerauthenticationoptions> , not oauthbearerauthenticationoptions.

this correct way register oauth2 bearer options:

services.configureoauthbearerauthentication(options => {     // configure options used oauth2 bearer middleware. });

Comments

Post a Comment

Popular posts from this blog

javascript - Using jquery append to add option values into a select element not working -

i'm looking dynamically populate select element names of items stored array. for reason it's not working , i'm not sure why. html: <div class="col-md-4 col-md-offset-4"> <select class="select1"> </select> , <select class="select2"> </select> </div> note i'm using bootstrap layout. here's jquery i'm using try , populate ".select1" jquery: select: function() { $.each(state.greens, function(index, value) { $(".select1").append("<option value =' " + index + " '>" + state.greens[index].name + "</option>"); }); } note function 'select' stored within object called 'display'. state.greens name of array i'm trying access. so @ end of html page call display.select(); call function. no error messages showing in console. also, saw question: appending
Read more

Android soft keyboard reverts to default keyboard on orientation change -

i'm building android soft keyboard , can't seem fix bug - have arabic , qwerty keyboard , when rotate device on qwerty keyboard (or arabic shift), it's if program has "restarted" , becomes arabic keyboard without shift. the onsaveinstancestate(bundle savedinstancestate) not work because application not extend activity inputmethodservice . i put following in android manifest android:configchanges="keyboard|keyboardhidden|orientation" android:windowsoftinputmode="stateunchanged|adjustresize"> i tried using @override public void onconfigurationchanged(configuration newconfig) { super.onconfigurationchanged(newconfig); log.i(mydebug, "config changed " + currentkeyboard.equals(qwerty)); } however, currentkeyboard.equals(qwerty)) results false , made sure true before orientation change. any appreciated. i think applications fault. if application restarting on orientation change
Read more

Rendering JButton to get the JCheckBox behavior in a JTable by using images does not update my table -

i rendering jbutton image on simulate jcheckbox behavior. why don't let jtable render jcheckbox? because need bigger checkboxes , there's no way can resize them (as far know). so, have own table cell renderer , editor. both renders jbutton , checkbox images on them. trying change image checked image unchecked image (or vice versa) , update cell value (boolean true or false). however, reason, getcelleditorvalue() not update table. so, release mouse, value goes original one. any appreciated! lot! public class tableexample extends jframe { jscrollpane pane; jpanel panel; jtable table; object[][] data; mytablemodel tm; renderer buttoncolumn; public tableexample(object[][] data) throws ioexception { string[] columns = {"column#1", "column#2", "column#3", "column#4", "column#5", "column#6"}; this.data = data; this.setpreferredsize(new dimension(700, 500));
Read more