Login page - Exception: Correlation failed

[YuriyTigiev]

Hello,

I build and run the solution in VS 2019 Version 16.7.0

I open the solution by address
http://docker.for.win.localhost:5100 or http://docker.for.linux.localhost:5100
When I'm trying to open a login page then I'm getting an error (see below).
I have registered in the system (one time) and now I'm trying to login to the system.

Docker use a WSL.
Docker version 2.3.0.4

Login page error

An unhandled exception occurred while processing the request.
Exception: Correlation failed.
Unknown location

Exception: An error was encountered while handling the remote login.
Microsoft.AspNetCore.Authentication.RemoteAuthenticationHandler.HandleRequestAsync()

Stack Query Cookies Headers Routing
Exception: Correlation failed.

Show raw exception details
Exception: An error was encountered while handling the remote login.
Microsoft.AspNetCore.Authentication.RemoteAuthenticationHandler.HandleRequestAsync()
Microsoft.AspNetCore.Authentication.AuthenticationMiddleware.Invoke(HttpContext context)
Microsoft.AspNetCore.Session.SessionMiddleware.Invoke(HttpContext context)
Microsoft.AspNetCore.Session.SessionMiddleware.Invoke(HttpContext context)
Microsoft.AspNetCore.Diagnostics.DeveloperExceptionPageMiddleware.Invoke(HttpContext context)

Show raw exception details

Login page error 2

But sometimes I'm getting an error (It happens randomly)
Error
Sorry, there was an error: unauthorized_client
Request Id: 0HM1SIIUVKC9P:00000010

[Harsh2016]

I resolved it after deleting and recreating the IdentityDb.

[YuriyTigiev]

I resolved it after deleting and recreating the IdentityDb.

How to do that?

[sughosneo]

Hi @YuriyTigiev, you may want to look into this unauthorized_client-error-on-login.

Thanks.

[Harsh2016]

Correlation Failed resolved by making changes in webmvc/startup.cs

services.Configure(options =>
{
// This lambda determines whether user consent for non-essential cookies is needed for a given request.
options.CheckConsentNeeded = context => true;
options.MinimumSameSitePolicy = SameSiteMode.None;

            options.OnAppendCookie = cookieContext =>
                CheckSameSite(cookieContext.Context, cookieContext.CookieOptions);
            options.OnDeleteCookie = cookieContext =>
                CheckSameSite(cookieContext.Context, cookieContext.CookieOptions);
        });

        **app.UseCookiePolicy();**   
        app.UseAuthentication();

[sughosneo]

Yes, agreed with @Harsh2016, Thanks for sharing.

Correlation Failed issue could be latest version of Chrome browser. Please check out this reference : https://devblogs.microsoft.com/aspnet/upcoming-samesite-cookie-changes-in-asp-net-and-asp-net-core/

Alternatively you can change the chrome browser settings as well if you don't want to change the code.

@YuriyTigiev, please check if this helps.

[mvelosop]

@sughosneo, perhaps a definite solution could be forwarding the login through the API gateway, so everything is served from that address.

[YuriyTigiev]

@sughosneo

Can you use the advice that offered @Harsh2016 and update the solution?

[sughosneo]

Hi @YuriyTigiev, there could be few other ways, the resolution of this issue could be looked at. For an e.g. the suggestion by @mvelosop in his comments. So it's under discussion to see which will have less impact but yet a definite fix for all set of deployments.

In the meantime, could you please confirm if chrome settings changes had actually fixed your issue ? or did you have to make code changes in your local ?

Thank you.

[YuriyTigiev]

@sughosneo

I have used the "SameSite" option and it works.

[mvelosop]

@YuriyTigiev, @Harsh2016, @sughosneo,

SameSite = None, should only work when using HTTPS in recent browsers is that your case?

[YuriyTigiev]

In my case, it's work for HTTP.

For https (https://docker.for.win.localhost:5105/) I'm getting an error
This site can’t provide a secure connectiondocker.for.win.localhost sent an invalid response.
Try running Windows Network Diagnostics.
ERR_SSL_PROTOCOL_ERROR

[sughosneo]

@mvelosop - For me also it happens with HTTP. One of the other behavior which I have noticed is that I am only able to reproduce this with chrome browser in MacOS but windows with same major Chrome version, I don't get to see this behavior.

I think I am missing some point. Thought ? I will have to recheck.

Thanks.

[YuriyTigiev]

@sughosneo

I have a question. Where we can discuss the architecture of the solution?

[sughosneo]

Hi @YuriyTigiev, did you get a chance to look into the Architecture Wiki. We have recently added Code Flow as well for different component.

If you have any questions on any specific topics, please feel free to create a new issue.

Thanks.