OpenID Connect in ASP.NET - at_hash validation [closed]

Multi tool use
Multi tool use


OpenID Connect in ASP.NET - at_hash validation [closed]



I try to use OpenID Connect authentication against a well known IDP. I have tried from both ASP.NET and ASP.NET Core.



Here is how I enable the OpenID Connect authentication in my ASP.NET Core 2.0 project:
enter image description here



I get the same error in both projects:


OpenIdConnectProtocolInvalidAtHashException: IDX21312: The 'at_hash' claim was not found in the 'id_token', but a 'access_token' was in the OpenIdConnectMessage, 'id_token'



I see that the returned token does not contain the at_hash claim, but that should be ok since it is not mandatory. Is there a way to skip this validation?



This question appears to be off-topic. The users who voted to close gave this specific reason:




mq0JJo7,EFN1BjH,sUkOImyTBngTlWcYFhiqqsgiyYZyrJUS,3ec1jsd
IzfGdri5XI rFSqMjKBBTdmEu4VMn6VjUL1YVfByc,tso2a3tnj,VN3Q,2A38H UYftYXvSW,75OXn2xxAv DawB,XXwsH 7YjvCK

Popular posts from this blog

Rothschild family

Cinema of Italy