asp.net-core - asp.net核心中IdentityServer4中的无效客户端[重复](Invalid Client in IdentityServer4 in asp.net core [duplicate])

Question

This question already has an answer here) : 这个问题已经在这里有了答案) ：)

Invalid_client using OpenIdConnect in client application (1 answer) 在客户端应用程序中使用OpenIdConnect的Invalid_client （1个答案）)

Closed 8 hours ago . 8小时前关闭。)

I'm using IdentityServer4 for authentication and I have a client as a console application.

(我正在使用IdentityServer4进行身份验证，并且有一个客户端作为控制台应用程序。)

I set the config in IdentityServer as follow:

(我在IdentityServer中将配置设置如下：)

new Client
{
    ClientId = "online.console.client",
    ClientName = "backoffice",
    AllowedGrantTypes = GrantTypes.ClientCredentials,
    ClientSecrets =
    {
        new Secret("secret".ToSha256())
    },
    AllowedScopes =
    {
        "webapi"
    }
}

And the client calling IdentityServer like here:

(客户端像下面这样调用IdentityServer：)

private static async Task<TokenResponse> RequestTokenAsync()
{
    var client = new HttpClient();

    var disco = await client.GetDiscoveryDocumentAsync("http://localhost:5001");
    if (disco.IsError)
    {
        throw new Exception(disco.Error);
    }

    var response = await client.RequestClientCredentialsTokenAsync(new ClientCredentialsTokenRequest
    {
        Address = disco.TokenEndpoint,

        ClientId = "online.console.client",
        Scope = "webapi",
        ClientSecret = "secret".ToSha256()
    });

    if (response.IsError)
    {
        throw new Exception(response.Error);
    }

    return response;
}

The reponse has error:

(响应有错误：)

fail: IdentityServer4.Validation.ClientSecretValidator[0]

(失败：IdentityServer4.Validation.ClientSecretValidator [0])

  Client secret validation failed for client: online.console.client. 

Where is my problem?

(我的问题在哪里？)

I guess the client has wrong config.

(我猜客户端配置错误。)

  ask by Saeid Mirzaei translate from so

Answer 1

In the client it's not required to call ToSha256 for ClientSecret.

(在客户端中，无需为ClientSecret调用ToSha256。)

You start true in server config but next do false for client.

(您在服务器配置中开始为true，但是接下来为客户端执行false。)

so all that is need to do:

(因此，所有需要做的是：)

ClientSecret =  "secret"