Microsoft.AspNetCore.Authentication.OpenIdConnect with Keycloak

[mtrana]

Hello,

we want to validate a jwt we receive from keycloak in C# using openid connect.

We have this code:

`
builder.Services.AddAuthentication("Bearer")

.AddJwtBearer("Bearer", options =>    {        options.Authority = "http://localhost:8080";

    options.Audience = "my_client";

    options.RequireHttpsMetadata = false;

    options.MetadataAddress = "http://localhost:8080/realms/my_realm/.well-known/openid-configuration";


    options.Events = new JwtBearerEvents        {            OnAuthenticationFailed = context =>            {                context.Response.StatusCode = 401;

            context.Response.ContentType = "application/json";


            // Customize the error response                var message = "Authentication failed: " + context.Exception.Message;

            var errorResponse = JsonSerializer.Serialize(new { message });

            return context.Response.WriteAsync(errorResponse);

        }

    };

});

`

And we receive this error message:
`
Microsoft.AspNetCore.Server.Kestrel[13]

  Connection id "0HMUJM1TSP27V", Request id "0HMUJM1TSP27V:00000001": An unhandled exception was thrown by the application.

  System.InvalidOperationException: IDX20803: Unable to obtain configuration from: 'http://localhost:8080/realms/my_realm/.well-known/openid-configuration'.         at Microsoft.IdentityModel.Protocols.ConfigurationManager`1.GetConfigurationAsync(CancellationToken cancel)

     at Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerHandler.HandleAuthenticateAsync()

     at Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerHandler.HandleAuthenticateAsync()

     at Microsoft.AspNetCore.Authentication.AuthenticationHandler`1.AuthenticateAsync()

     at Microsoft.AspNetCore.Authentication.AuthenticationService.AuthenticateAsync(HttpContext context, String scheme)

     at Microsoft.AspNetCore.Authentication.AuthenticationMiddleware.Invoke(HttpContext context)

     at Microsoft.AspNetCore.Diagnostics.DeveloperExceptionPageMiddlewareImpl.Invoke(HttpContext context)

     at Microsoft.AspNetCore.Diagnostics.DeveloperExceptionPageMiddlewareImpl.Invoke(HttpContext context)

     at Microsoft.AspNetCore.Watch.BrowserRefresh.BrowserRefreshMiddleware.InvokeAsync(HttpContext context)

     at Microsoft.AspNetCore.Server.Kestrel.Core.Internal.Http.HttpProtocol.ProcessRequests[TContext](IHttpApplication`1 application)

`

Is there any configuration in keycloak we are missing or must we add something to our c# code?

Thank you for your help
Ana

[martincostello]

Try looking at the inner exception of the InvalidOperationException for the underlying reason why fetching the configuration failed.

[mtrana]

This is the inner exception message
Itries to downgrade to version 6 but this didnt work too.

`
---> System.TypeLoadException: Could not load type 'Microsoft.IdentityModel.Json.JsonConvert' from assembly 'Microsoft.IdentityModel.Tokens, Version=7.0.3.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35'.

     at Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectConfigurationRetriever.GetAsync(String address, IDocumentRetriever retriever, CancellationToken cancel)

     at System.Runtime.CompilerServices.AsyncMethodBuilderCore.Start[TStateMachine](TStateMachine& stateMachine)         at Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectConfigurationRetriever.GetAsync(String address, IDocumentRetriever retriever, CancellationToken cancel)

     at Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectConfigurationRetriever.Microsoft.IdentityModel.Protocols.IConfigurationRetriever<Microsoft.IdentityModel.Protocols.OpenIdConnect.OpenIdConnectConfiguration>.GetConfigurationAsync(String address, IDocumentRetriever retriever, CancellationToken cancel)

     at Microsoft.IdentityModel.Protocols.ConfigurationManager`1.GetConfigurationAsync(CancellationToken cancel)

`

[martincostello]

You'll need to ensure that all of your direct and indirect dependencies are referencing 6.x or 7.x packages for IdentityModel: #50943 (comment)

[mtrana]

My dependencies look like this. Am I missing something? Because I am still getting the same error.
<ItemGroup> <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="7.0.0" /> <PackageReference Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="7.0.0" /> <PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="7.0.0" /> <PackageReference Include="Microsoft.IdentityModel" Version="7.0.0" /> <PackageReference Include="Microsoft.IdentityModel.JsonWebTokens" Version="7.0.0" /> <PackageReference Include="Microsoft.VisualStudio.Azure.Containers.Tools.Targets" Version="1.19.5" /> <PackageReference Include="Newtonsoft.Json" Version="13.0.3" /> <PackageReference Include="Serilog" Version="3.0.1" /> <PackageReference Include="Serilog.AspNetCore" Version="7.0.0" /> <PackageReference Include="Serilog.Sinks.Console" Version="4.1.0" /> <PackageReference Include="Swashbuckle.AspNetCore" Version="6.5.0" /> <PackageReference Include="System.Configuration.ConfigurationManager" Version="7.0.0" /> <PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="7.0.0" /> </ItemGroup>

[martincostello]

Does something in your dependency tree indirectly depend on some other package related to identity model that's not being updated to a v7 version?