JWT Token Expiring before the expiry date

[vsfeedback]

This issue has been moved from a ticket on Developer Community.

---

Bearer eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJyb2xlIjoiNDcyMTgzOTctN2U5Mi1lZjExLWIzMDMtZmJlYWJlYmI4OWY3IiwidXNlclB1YmxpY0tleSI6IjQ3MjE4Mzk3LTdlOTItZWYxMS1iMzAzLWZiZWFiZWJiODlmNyIsInVzZXJMZWFkS2V5IjoiMDhDRDFFQTgtN0U5Mi1FRjExLUIzMDMtRkJFQUJFQkI4OUY3IiwibmJmIjoxNzI5ODI1ODU1LCJleHAiOjE3NjEzNjE4NTUsImlhdCI6MTcyOTgyNTg1NX0.G5yrkcg8d_rFUM1_aboXVlyMWZk6cH55oT52d53CCkJCNXnaabCIPDwT9ZesSZkT-MpqS2M_dLajp7aUP_PuEg

Error Message :

IDX10503: Signature validation failed. Token does not have a kid. Keys tried: 'Microsoft.IdentityModel.Tokens.SymmetricSecurityKey, KeyId: '', InternalId: '1A0Zb0FkJPlCk0KkEZh93ZidpNf3c21XUJ97LKWn83k'. , KeyId:
'. Number of keys in TokenValidationParameters: '1'.
Number of keys in Configuration: '0'.
Exceptions caught:
''.
token: '[Security Artifact of type 'System.IdentityModel.Tokens.Jwt.JwtSecurityToken' is hidden. For more details, see https://aka.ms/IdentityModel/SecurityArtifactLogging.]'. See https://aka.ms/IDX10503 for details.

Detail Stack Trace
at System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ValidateSignature(String token, JwtSecurityToken jwtToken, TokenValidationParameters validationParameters, BaseConfiguration configuration)
at System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ValidateJWS(String token, TokenValidationParameters validationParameters, BaseConfiguration currentConfiguration, SecurityToken& signatureValidatedToken, ExceptionDispatchInfo& exceptionThrown)
--- End of stack trace from previous location ---
at System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ValidateToken(String token, JwtSecurityToken outerToken, TokenValidationParameters validationParameters, SecurityToken& signatureValidatedToken)
at System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ValidateToken(String token, TokenValidationParameters validationParameters, SecurityToken& validatedToken)
at Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerHandler.HandleAuthenticateAsync()

---

Original Comments

Nicole Hu [MSFT] on 12/22/2024, 10:24 PM:

We have converted this feedback item to a problem. This change was done to better reflect the feedback’s nature. It will allow other developers to easily find it and engage on it.

Feedback Bot on 12/22/2024, 10:25 PM:

We have directed your feedback to the appropriate engineering team for further evaluation. The team will review the feedback and notify you about the next steps.

[dotnet-policy-service]

Thank you for filing this issue. In order for us to investigate this issue, please provide a minimal repro project that illustrates the problem without unnecessary code. Please share with us in a public GitHub repo because we cannot open ZIP attachments, and don't include any confidential content.