Skip to content

v3.1.3-preview-240211-2

Pre-release
Pre-release

Choose a tag to compare

@artmasa artmasa released this 11 Feb 20:40
2878baf

Remove Functions bult-in JwtBearer configuration by default (Breaking change?)

Azure Functions recently added configuration for issuer and audience validation for the default authentication flows, not the one supported by this package through FunctionAuthorizeAttribute, which interferes with token validation when using our own Bearer scheme token configuration.
In prior versions, this package has functionality to clear Functions built-in configuration, but it was not enabled by default when using AddJwtBearer(Action<JwtBearerOptions> configure, bool removeBuiltInConfig = false). Since the use of this package is commonly used for custom JWT token, the default value of removeBuiltInConfig is now true.