Debian:没有配置身份验证处理程序来处理方案:自动 [英] Debian: No authentication handler is configured to handle the scheme: Automatic

问题描述

我有一些问题，例如 this，但我不明白如何为 Debian 解决它.

I have some issue like this, but i can't understand how to solve it for Debian.

首先，我按如下所述配置我的应用程序

At first, i configure my application as described below

app.UseCookieAuthentication(new CookieAuthenticationOptions
            {
                AuthenticationScheme =MyAuthSchemeName,
                CookieName = MyCookiName,
                AutomaticAuthenticate = true,
                AutomaticChallenge = false,
                SlidingExpiration = true,
                ExpireTimeSpan = TimeSpan.FromDays(1),
                DataProtectionProvider = DataProtectionProvider.Create(MyApplicationName)
            });

app.UseJwtBearerAuthentication(new JwtBearerOptions
            { 
                AutomaticChallenge = false,
                AutomaticAuthenticate = true,
                Authority = IdentityServerConnectionString,
                RequireHttpsMetadata = false,
                BackchannelHttpHandler = new HttpClientHandler().ServerCertificateCustomValidationCallback = (request, cert, chain, errors) => true,
                TokenValidationParameters = new TokenValidationParameters
                {
                    ValidateAudience = false,
                    ValidateIssuer = false,
                }
            });

app.UseMvc();

对于 Windows，它运行良好(我使用 Host 来启动此代码，而不是 IIS！)，但对于 Debian，它失败了.有什么想法吗?

For windows it works perfectly (I use Host for launching this code, not IIS !), but for Debian it fails. Any ideas?

UPD: 我在日志中看到下一条消息:Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationMiddleware MyAuthSchemeName 未经过身份验证.失败消息:取消保护票证失败

UPD: I see next message in logs: Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationMiddleware MyAuthSchemeName was not authenticated. Failure message: Unprotect ticket failed

推荐答案

我找到了这个问题的解决方案.主要原因是 DataProtectionProvider 的设置.对于 Debian，需要使用下面的代码

I found solution for this issue. Key cause is a settings of DataProtectionProvider. For Debian it's needed to use code below

Startup.cs:

Startup.cs :

public void ConfigureServices(IServiceCollection services)
    {
      services.AddDataProtection().SetApplicationName(ApplicationName).
               PersistKeysToFileSystem(
                    new DirectoryInfo(Configuration["/some_path_to_folder_for_keys"]))
    }

并且应该删除 cookie 的 dataprovider 初始化(来自 UseCookieAuthentication())；

And dataprovider initialization should be removed for cookie (from UseCookieAuthentication());

这篇关于Debian:没有配置身份验证处理程序来处理方案:自动的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！