Exception during login

[ghost]

I'm following along the AspNet Core quickstart and I get the following exception while trying to login:

_SecurityTokenInvalidSignatureException: IDX10503: Signature validation failed. Keys tried: 'Microsoft.IdentityModel.Tokens.X509SecurityKey , KeyId: RTM1NzUzMkJCMDIwRjc5MTQ4MTIyNzU2QTQ4OUI0QkZCOTYxMjIyRg
Microsoft.IdentityModel.Tokens.RsaSecurityKey , KeyId: RTM1NzUzMkJCMDIwRjc5MTQ4MTIyNzU2QTQ4OUI0QkZCOTYxMjIyRg
'.
Exceptions caught:
'System.ArgumentException: IDX10634: Unable to create the SignatureProvider.

SignatureAlgorithm: 'HS256', SecurityKey: 'Microsoft.IdentityModel.Tokens.X509SecurityKey'
is not supported._

Any help will be greatly appreciated.

Thanks,
Rudy

[webbkvalite]

If you're using a HS256-key, it can be fixed by setting the TokenValidationParameters on the OpenIdConnectOptions.
First turn the clientSecret into a byte[] like so:

var keyAsBase64 = Configuration["auth0:clientSecret"].Replace('_', '/').Replace('-', '+');
var keyAsBytes = Convert.FromBase64String(keyAsBase64);

Next add the TokenValidationParameters like so:

TokenValidationParameters =
    {
        IssuerSigningKey = new SymmetricSecurityKey(keyAsBytes)
    }

[hjgraca]

If you are getting this error it means you haven't changed the settings in the Auth0 dashboard. You need to change JsonWebToken Signature Algorithm to use RS256 under advanced options of your client.

[alatchi]

Thank you very much.
This fix the error.
I've changed from HmacSha256Signature to RsacSha256Signature.