JWT not returning role and aud properties.

To ensure you get the best experience, this website uses cookies.

Learn More

JWT not returning role and aud properties.

viewed
138

edited

posted

bpsimard

Title

Body

I am building a Xamarin app and attempting to use CloudScribe as the API / IdentityServer backend.  I started with the example Xamarin project and was able to get things working with the example no_db project.  In order to make things a bit more stateful when using docker I've chosen to use MySql as the database for CloudScribe and Identity Server.  I created a new project from the CloudScribe template and attempted to replicate the setup in the example project.

I have matched the configuration the best I can with one exception.  If I add 'idserverapi' as an API resource with the scope name 'idserverapi' like in the example I get the error: 'Found identity scopes and API scopes that use the same names. This is an invalid configuration. Use different names for identity scopes and API scopes. Scopes found: idserverapi.'  I can understand the error but not why it's set in the example project without issue.

The authentication to the API seems to work and a access token is returned.  The problem I see is that when I decode the JWT the example project returned the 'role' and 'aud' properties, but the MySql project does not.

Example:

{
       "nbf": 1564425479,
        "exp": 1564429079,
        "iss": "http://10.10.12.200:5151",
         "aud": [
          "http://10.10.12.200:5151/resources",
          "idserverapi"
        ],
        "client_id": "native.hybrid",
        "sub": "19d0f112-34ef-4266-b1b4-d9c2ead8349a",
        "auth_time": 1537120333,
        "idp": "local",
        "role": [
          "Administrators",
    "Authenticated Users",
           "ServerAdmins"
         ],
        "jti": "470d8d321cf0963a263c1411a650f4ed",
        "scope": [
          "profile",
         "offline_access",
         "email",
          "openid",
          "idserverapi",
         "offline_access"
       ],
        "amr": [
         "pwd"
       ]
      }

MySql:

{
        "nbf": 1564425843,
        "exp": 1564429443,
       "iss": "http://10.10.12.200:5000",
        "aud": "http://10.10.12.200:5000/resources",
         "client_id": "native.hybrid",
         "sub": "9395417f-4d86-4e2a-90f3-0bb9752797f9",
        "auth_time": 1564424485,
       "idp": "local",
        "jti": "fbdaaf34fc13237af683fe80d0bb86b4",
        "scope": [
         "email",
          "offline_access",
           "openid",
          "profile",
          "idserverapi",
          "offline_access"
         ],
         "amr": [
          "pwd"
        ]
       }

Thank you for any assistance you can give.

Preview

add a comment

JWT not returning role and aud properties.

Answers

Tags