AzureAD / azure-activedirectory-identitymodel-extensions-for-dotnet

IdentityModel extensions for .Net
MIT License
1.06k stars 401 forks source link

[Feature Request] Automated testing for mixed versions of IM in ASP.NET #2944

Open keegan-caruso opened 1 month ago

keegan-caruso commented 1 month ago

Is your feature request related to a problem? Please describe.

It is clear that many customers will mix and match versions of Identity Model, for example:

Create a new webapi with JWT Bearer which takes a dep on OpenIdConnect: Microsoft.IdentityModel.Protocols.OpenIdConnect

The app then will update a different dependency, say Microsoft.IdentityModel.Tokens, to a higher version.

Describe the solution you'd like

Automated testing that is essentially

dotnet new webapi --auth singleorg --clientid <client-id> --tenant-id <tenant-id>
dotnet add package Microsoft.IdentityModel.Tokens --version <version-under-test>
<run-test-that-validates-a-token-and-parses-claims>

Describe alternatives you've considered

There is not a good alternative, this is a scenario that should be supported, it needs to be tested.

Additional context See all the issues tagged with dependency mismatch