Getting 401 unauthorized ASP.NET CORE 6

Question

Im implementing role based authentication in ASP.NET CORE 6, and im getting 401 Unauthorized from Postman. i have included the bearer token, i have checked it in jwt.io and it is valid. but it still shows up 401 unauthorized. here is my startup.cs file

builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
    .AddJwtBearer(options =>
    {
        options.TokenValidationParameters = new TokenValidationParameters
        {
            ValidateIssuerSigningKey = true,
            IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(builder.Configuration.GetSection("AppSettings:Token").Value)),
            ValidateIssuer = false,
            ValidateAudience = false
        };
    });
builder.Services.AddControllersWithViews();
builder.Services.AddRazorPages();

var app = builder.Build();

// Configure the HTTP request pipeline.
if (app.Environment.IsDevelopment())
{
    app.UseWebAssemblyDebugging();
}
else
{
    app.UseExceptionHandler("/Error");
    // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
    app.UseHsts();
}

app.UseHttpsRedirection();

app.UseBlazorFrameworkFiles();
app.UseStaticFiles();

app.MapRazorPages();

app.UseAuthentication();
app.UseRouting();
app.UseAuthorization();

app.MapControllers();
app.MapFallbackToFile("index.html");

app.Run();

and here is a controller method

[HttpGet("onlinedrivers"), Authorize]

public async Task<ActionResult> GetOnlineDrivers()
{
    var result = await _driverServices.GetOnlineDrivers();
    return Ok(result);
}

i included the jwt bearer token as follows

i dont know what im doing wrong

Why do you have a middleware between UseAuthentication and UseAuthorization? Normally UseRouting goes before them both. — gunr2171
– gunr2171, Commented Apr 30, 2022 at 19:44
i was using that, i just saw an answer on this site that implemented that structure, still doesn't work. — Danny
– Danny, Commented Apr 30, 2022 at 19:45
Do you need to configure the options.Authority (or options.Audience, though you've configured the validator not to check it) inside AddJwtBearer? Also go into your appsettings.Development.json file and change the logging to Debug and watch the console output to help find out why auth isn't catching. — gunr2171
– gunr2171, Commented Apr 30, 2022 at 19:48

Danny · Accepted Answer · 2022-04-30 20:08:21Z

2

It it fixed, found out i had commented out the token expiration date when i was creating it. i checked the log thanks to gunr2171 and it said

Bearer error="invalid_token", error_description="The token has no expiration"

so when i added the expiration date, it worked.

answered Apr 30, 2022 at 20:08

Danny

5261 gold badge8 silver badges20 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Dotan Mezushan · Accepted Answer · 2022-11-19 16:17:52Z

1

builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
        .AddJwtBearer(options =>
        {
            options.TokenValidationParameters = new TokenValidationParameters
            {
                ValidateIssuerSigningKey = true,
                IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(builder.Configuration.GetSection("AppSettings:Token").Value)),
                ValidateIssuer = false,
                ValidateAudience = false,
                ValidateLifetime = false // you dont want to validate lifetime 
            };
        });

edited Nov 19, 2022 at 16:17

answered Nov 19, 2022 at 16:16

Dotan Mezushan

112 bronze badges

1 Comment

Community Over a year ago

As it’s currently written, your answer is unclear. Please edit to add additional details that will help others understand how this addresses the question asked. You can find more information on how to write good answers in the help center.

Collectives™ on Stack Overflow

Getting 401 unauthorized ASP.NET CORE 6

2 Answers 2

Comments

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related