We are trying to integrate our custom application written in .net core mvc with our customer’s Okta (organization created from IT product / not from developer.okta)
Before that, I am testing with the following quickstart.
Receiving 'SecurityTokenSignatureKeyNotFoundException: IDX10501: Signature validation failed. Unable to match ‘kid’: ‘nSLf9FeEKRKTwBoEwU0d-Kmk7tJAY6oFQuFLqdtPM1U’, error.
Testing with organization created in developer.okta seems ok.
Our customer does not have API AM in their sandbox. For some reasons, they are not going to enable API AM.
In that case, will this milddleware handle the token validation for the organization without authorization server?
Here is the error I am getting when trying with organization without API AM.
An unhandled exception occurred while processing the request.
HttpRequestException: Response status code does not indicate success: 401 (Unauthorized).