Deprecated Microsoft.AspNetCore.Authentication.JwtBearer dependency

[GioeleSalvioni]

Is there an existing issue for this?

• I have searched the existing issues

Describe the bug

Microsoft.AspNetCore.Authentication.JwtBearer (8.0.17) uses a deprecated version of Microsoft.IdentityModel.Protocols.OpenIdConnect (7.1.2) which couses my docker build to brake.

Expected Behavior

Microsoft.AspNetCore.Authentication.JwtBearer for .NET 8 should reference the first available supported version of Microsoft.IdentityModel.Protocols.OpenIdConnect

Steps To Reproduce

No response

Exceptions (if any)

No response

.NET Version

8.0.204

Anything else?

No response

[MackinnonBuck]

Thanks for reaching out, @GioeleSalvioni.

This looks like a duplicate of #52099. Unfortunately, we can't upgrade the dependency on Microsoft.IdentityModel.Protocols.OpenIdConnect because there was a breaking change in that package between version 7.1.2 and 7.4.1. What we'd recommend is to depend on Microsoft.AspNetCore.Authentication.JwtBearer version 9.0 in your project. Could you please try this out and let us know if it works for you?

[dotnet-policy-service]

Hi @@GioeleSalvioni. We have added the "Needs: Author Feedback" label to this issue, which indicates that we have an open question for you before we can take further action. This issue will be closed automatically in 7 days if we do not hear back from you by then - please feel free to re-open it if you come back to this issue after that time.

[dotnet-policy-service]

This issue has been automatically marked as stale because it has been marked as requiring author feedback but has not had any activity for 4 days. It will be closed if no further activity occurs within 3 days of this comment. If it is closed, feel free to comment when you are able to provide the additional information and we will re-investigate.

See our Issue Management Policies for more information.