Facebook JWT authentication using ASP.NET Core Web API

Question

I am using ASP.NET Core 2.0 Web API to create application with authentication. I want to login using "login/password" combination and using Facebook. I am using JWT tokens for authorization. From Startup.cs I am calling extension method RegisterAuth.

public static void RegisterAuth(this IServiceCollection services, AuthSettings authSettings)
{
    services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
        .AddJwtBearer(options =>
        {
            options.SaveToken = true;
            options.TokenValidationParameters = new TokenValidationParameters
            {
                ValidateIssuer = true,
                ValidateAudience = false,
                ValidateLifetime = true,
                ValidateIssuerSigningKey = false,
                ValidIssuer = authSettings.Issuer,
                ValidAudience = authSettings.Audience,
                IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(authSettings.SecretKey))
            };
        })
        .AddFacebook(facebookOptions =>
        {
            facebookOptions.AppId = authSettings.Facebook.AppId;
            facebookOptions.AppSecret = authSettings.Facebook.AppSecret;
            facebookOptions.SignInScheme = "Bearer";
        });
}

In my controller I have 2 methods. Login for "login/password" combination which it works and returns me jwt token. And SignIn for facebook which does not work.

[Route("SignIn/{provider}")]
public IActionResult SignIn(string provider)
{
    return Challenge(new AuthenticationProperties(), provider);
}

SignIn redirects to the facebook page from where after signing in it throws an exception.

InvalidOperationException: No IAuthenticationSignInHandler is configured to handle sign in for the scheme: Bearer

So please help me to fix Facebook Auth. Thank you!

Gor Asatryan · Accepted Answer · 2019-04-22 09:10:07Z

1

Just have to change Facebook SignInScheme and add cookies.

1) Change "Bearer"; to CookieAuthenticationDefaults.AuthenticationScheme; and add cookie.

2) After AddAuthentication add

.AddCookie()
.AddFacebook(facebookOptions =>
{
    facebookOptions.AppId = authSettings.Facebook.AppId;
    facebookOptions.AppSecret = authSettings.Facebook.AppSecret;
    facebookOptions.SignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
});

edited Apr 22, 2019 at 9:10

answered Apr 12, 2019 at 22:55

Gor Asatryan

9247 silver badges26 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Pier-Lionel Sgard Over a year ago

Hi @gor-asatryan, I don't understand very well all authentication schemes, but I think in this case, you do not use JWT approach anymore but the Cookie one, no?

Gor Asatryan Over a year ago

Yes. Using cookie authentication for facebook and jwt for login+password combination

Sampath Over a year ago

How do you handle the Token/Cookie expiration use case with FB? or will it change only when the user Signed Out? or life time one?

Collectives™ on Stack Overflow

Facebook JWT authentication using ASP.NET Core Web API

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related