How to validate token without kid

Somesh Banjare 0

Microsoft.IdentityModel.Tokens.SecurityTokenSignatureKeyNotFoundException: 'IDX10503: Signature validation failed. Token does not have a kid. Keys tried: '[PII of type 'System.Text.StringBuilder' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]'. Number of keys in TokenValidationParameters: '1'.

Number of keys in Configuration: '0'.

Exceptions caught:

'[PII of type 'System.Text.StringBuilder' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]'.

token: '[PII of type 'System.IdentityModel.Tokens.Jwt.JwtSecurityToken' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]'. See https://aka.ms/IDX10503 for details.'

Somesh Banjare 0 Reputation points

2024-07-08T04:40:20.5466667+00:00

I want to validate token without adding kid is it possible
Imran Javed Zia 0 Reputation points

2024-08-12T17:10:43.1533333+00:00
Practically no! if you are under single node, then you can use System Generated Key but it will change on very restart or AppPool. And on a cluster or load balanced environment you cannot avoid this issue.

You may use Self Signed Certificate, Azure Key Vault Certificate or predefined random key key.

But this issue looks like more related to PII/GDPR thing. Please try following code at you application start level (program.cs) before web host build or remove user information email, name and etc from token,

IdentityModelEventSource.ShowPII = true;

Share via

How to validate token without kid

Your answer