UseIdentityServerJwt not working in latest beta about identityserver3.accesstokenvalidation HOT 6 CLOSED

It's now UseIdentityServerBearerTokenAuthentication. See this:

https://github.com/thinktecture/Thinktecture.IdentityServer.v3.Samples/blob/master/source/Clients/SampleAspNetWebApi/Startup.cs#L17

from identityserver3.accesstokenvalidation.

Thanks Brock, so this class now encapsulates the jwt and reference token configurators? How do we now set up the signing certificates? Is there a more complete example of how to use this class? Thanks

from identityserver3.accesstokenvalidation.

Yes. The mode property configures if token validation is done locally as a jwt or if requests are made back to identity server to validate the token.

from identityserver3.accesstokenvalidation.

You set it using the standard TokenValidationParameters now. Why do you want so set it explicitly?

from identityserver3.accesstokenvalidation.

It's not that I want to set it explicitly, just trying to understand the new structure, how it works and how it's used, along with the parallels with the previous way of doing it.

from identityserver3.accesstokenvalidation.

I had a working application and after updating to the latest IdSrv and latest AccessTokenValidation I get 401 all the time. There are no errors. All other applications work fine with the latest IdSrv and the version before this commit 04088fb

I did a debug session. Getting metadata works fine. Issuer is there, cert, audiance etc, but when I do a request it just rejects me.

var _configurationManager = new ConfigurationManager("https://idsrv/.well-known/openid-configuration", new HttpClient(new WebRequestHandler()));
var result = _configurationManager.GetConfigurationAsync().Result;

            var tokens = from key in result.JsonWebKeySet.Keys
                         select new X509SecurityToken(new X509Certificate2(Convert.FromBase64String(key.X5c.First())));

This is my configuration:
app.UseIdentityServerBearerTokenAuthentication(new IdentityServerBearerTokenAuthenticationOptions
{
Authority = "https://idsrv",
ValidationMode = ValidationMode.Local,
AuthenticationType = "Bearer"
});

And the token:
{
"client_id": "localclient",
"scope": [
"read",
"write"
],
"iss": "https://idsrv/issuer",
"aud": "https://idsrv/issuer/resources",
"exp": 1418334898,
"nbf": 1418331298
}

One more thing. In one of the debugging sessions I got "invalid bearer token received". Just once...
http://www.symbolsource.org/MyGet/Metadata/aspnetwebstacknightly/Project/Microsoft.Owin.Security.OAuth/2.0.0-rtw2-20821-583-dev/Release/.NETFramework,Version%3Dv4.5/Microsoft.Owin.Security.OAuth/Microsoft.Owin.Security.OAuth/OAuthBearerAuthenticationHandler.cs?ImageName=Microsoft.Owin.Security.OAuth

from identityserver3.accesstokenvalidation.