Token Authentication in ASP.NET Core 2.0 - A Complete Guide

PB

I found the “problem”. I checked in library source, and I saw that if request doesn’t have any Authorization header value or the value is empty, the service doesn’t make a call to authority service.

If I add authorization header value eg. Bearer xyz the service perform the call to authority server in order to obtain authorization metadata.

So your’s code is good and that was only my oversight, but I thought that the service will make a call to authority server event the authorization header value is missing or empty :slight_smile: