Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Okta SDK.NET 8.1.5 Triggers a transient dependency breaking issue #745

Open
rcollette opened this issue Sep 18, 2024 · 0 comments
Open

Okta SDK.NET 8.1.5 Triggers a transient dependency breaking issue #745

rcollette opened this issue Sep 18, 2024 · 0 comments
Labels

Comments

@rcollette
Copy link

rcollette commented Sep 18, 2024

Describe the bug?

This is not a bug per-se, but existing applications can experience a breaking change to their application behavior, due to a mismatch in dependency versions needed by Microsoft.AspNetCore.Authentication.JwtBearer

I have documented the issue further in
dotnet/aspnetcore#57940

The normal list of dependencies for Microsoft.AspNetCore.Authentication.JwtBearer are shown here
image

When importing just the two updated versions of packages that were included with the 8.1.5 release, there is now a mismatch between the cooperating packages

image

To fix two additional packages must be referenced in the project.

    <PackageReference Include="Microsoft.IdentityModel.Protocols" Version="8.0.2" />
    <PackageReference Include="Microsoft.IdentityModel.Protocols.OpenIdConnect" Version="8.0.2" />

What is expected to happen?

Documentation of this library may want to call out, at least on a temporary basis, the need to import additional dependencies to ensure JWTBearer token authentication does not break, if being used.

What is the actual behavior?

JWTBearer authentication fails at runtime with

IDX10500: Signature validation failed. No security keys were provided to validate the signature

Reproduction Steps?

The description is sufficient since there isn't an actual bug in the SDK code.

Additional Information?

No response

.NET Version

8.0.401

SDK Version

8.1.5

OS version

No response

@rcollette rcollette added the bug label Sep 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant