[Discussion] App Service Authentication/Authorization Middleware Version 1.4.0

mkarmark commented 3 years ago

Discussion issue for App Service Authentication/Authorization Middleware Version 1.4.0

shibayan commented 3 years ago

Can you share the estimated time that version 1.4.0 deployment will be completed?

shibayan commented 3 years ago

I've tried v1.4.0 and I have to say that using the OpenID Connect Provider with Easy Auth is still a very tough.

Setting up OpenID Connect for Azure AD B2C still generates incorrect Authorization URL
Error while verifying an id_token signed by ECDSA
- Error messages are masked, making it difficult to determine the cause

2020-10-27T16:45:59  PID[6140] Information Failed to validate jwt token due to SecurityTokenInvalidSignatureException, attempting to redownload OpenID Connect Config
2020-10-27T16:45:59  PID[6140] Warning     JWT validation failed: IDX10503: Signature validation failed. Keys tried: '[PII is hidden]'.
Exceptions caught:
 '[PII is hidden]'.
token: '[PII is hidden]'..

When Token Store is enabled, I will be redirected with a URL fragment after you complete your login in OpenID Connect
- Is this the behavior intended by design? This is not how it appears to work when configured from Azure Portal.

mkarmark commented 3 years ago

Hi @shibayan! Thank you for trying out version 1.4.0, and we are looking into your feedback! We appreciate your patience and will keep updating this thread with findings.

Azure / app-service-announcements-discussions

[Discussion] App Service Authentication/Authorization Middleware Version 1.4.0 #206