Download Latest Version
Duende.AspNetCore.Authentication.JwtBearer 1.0.2 source code.tar.gz (24.9 MB)
Get an email when there's a new version of IdentityServer
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| Duende.AspNetCore.Authentication.JwtBearer 1.0.2 source code.tar.gz | 2026-04-01 | 24.9 MB | |
| Duende.AspNetCore.Authentication.JwtBearer 1.0.2 source code.zip | 2026-04-01 | 27.0 MB | |
| README.md | 2026-04-01 | 546 Bytes | |
| Totals: 3 Items | 52.0 MB | 0 | |
This is a patch release that fixes a thread-safety bug in DPoP proof validation.
What's Changed
Bug Fix: Fixed a race condition in DPoPProofValidator.ValidateToken() where the shared TokenValidationParameters singleton had its IssuerSigningKey overwritten by concurrent requests using different DPoP keys, causing intermittent IDX10503 signature validation failures (~5-10% failure rate under load with multiple DPoP keys).
The fix clones TokenValidationParameters before mutation so each request operates on its own copy.
