Identity Server 6 without EF (Issue connecting with API)

[thedjohn]

Select Topic Area

Question

Body

Currently I have Identity Server 6 (not connecting to database at the moment) making a request with Postman to call API. I am able to see the JWT with appropriate values; when making call it states "[Fatal] Duende.IdentityServer.Hosting.IdentityServerMiddleware
Unhandled exception: Object reference not set to an instance of an object." I am missing the discovery document. Any suggestions would be greatly appreciated.

API (Program.cs)

var builder = WebApplication.CreateBuilder(args);

// Add services to the container.

builder.Services.AddControllers();
// Learn more about configuring Swagger/OpenAPI at https://aka.ms/aspnetcore/swashbuckle
builder.Services.AddEndpointsApiExplorer();
builder.Services.AddSwaggerGen();

builder.Services.AddAuthentication("Bearer")
.AddJwtBearer("Bearer", options =>
{
options.Authority = "https://localhost:5001";

    options.RequireHttpsMetadata = false;

    //options.Configuration = new OpenIdConnectConfiguration();
});

builder.Services.AddAuthorization(options =>
{
options.AddPolicy("ApiScope1", policy =>
{
policy.RequireAuthenticatedUser();
policy.RequireClaim("scope", "api1");
});

options.AddPolicy("ApiScope2", policy =>
{
    policy.RequireAuthenticatedUser();
    policy.RequireClaim("scope", "api2");
});

});

var app = builder.Build();

// Configure the HTTP request pipeline.
if (app.Environment.IsDevelopment())
{
app.UseSwagger();
app.UseSwaggerUI();
}

app.UseHttpsRedirection();

app.UseAuthentication();
app.UseAuthorization();

app.MapControllers().RequireAuthorization();

app.Run();

---

API (WeatherForecastController.cs)

using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;

namespace Api.Controllers;

[ApiController]
[Route("[controller]")]
public class WeatherForecastController : ControllerBase
{
private static readonly string[] Summaries = new[]
{
"Freezing", "Bracing", "Chilly", "Cool", "Mild", "Warm", "Balmy", "Hot", "Sweltering", "Scorching"
};

private readonly ILogger<WeatherForecastController> _logger;

public WeatherForecastController(ILogger<WeatherForecastController> logger)
{
    _logger = logger;
}


[HttpGet]
[Authorize(Policy = "ApiScope2")]
public IEnumerable<WeatherForecast> Get()
{
    return Enumerable.Range(1, 5).Select(index => new WeatherForecast
    {
        Date = DateOnly.FromDateTime(DateTime.Now.AddDays(index)),
        TemperatureC = Random.Shared.Next(-20, 55),
        Summary = Summaries[Random.Shared.Next(Summaries.Length)]
    })
    .ToArray();
}

}

---

Identity Server (HostingExtensions.cs)

using Microsoft.IdentityModel.Logging;
using Serilog;

namespace IdentityServer;

internal static class HostingExtensions
{
public static WebApplication ConfigureServices(this WebApplicationBuilder builder)
{
builder.Services.AddMvc();

    builder.Services.AddIdentityServer(isrvconfig =>
        {
            isrvconfig.Events.RaiseErrorEvents = true;
            isrvconfig.Events.RaiseInformationEvents = true;
            isrvconfig.Events.RaiseFailureEvents = true;
            isrvconfig.Events.RaiseSuccessEvents = true;
            isrvconfig.KeyManagement.RotationInterval = TimeSpan.FromDays(90);
            isrvconfig.KeyManagement.PropagationTime = TimeSpan.FromDays(2);
            isrvconfig.KeyManagement.RetentionDuration = TimeSpan.FromDays(7);
            isrvconfig.KeyManagement.DeleteRetiredKeys = false;
            isrvconfig.KeyManagement.KeyPath = "";
        })
        //.AddSigningKeyStore<SigningKeyStore>()
        .AddDeveloperSigningCredential()
        .AddCorsPolicyService<CorsPolicyService>()
        .AddResourceStore<ResourceStore>()
        .AddClientStore<ClientStore>()
        .AddIdentityProviderStore<IdentityProviderStore>();

    //builder.Services.AddDataProtection();

    return builder.Build();
}

public static WebApplication ConfigurePipeline(this WebApplication app)
{
    app.UseIdentityServer();

    app.UseSerilogRequestLogging();

    if (app.Environment.IsDevelopment())
    {
        IdentityModelEventSource.ShowPII = true; // NOT SURE ABOUT THIS
        app.UseDeveloperExceptionPage();
    }

    // uncomment if you want to add a UI
    app.UseStaticFiles();
    app.UseRouting();

    // uncomment if you want to add a UI
    app.UseAuthorization();
    app.MapRazorPages().RequireAuthorization();

    return app;
}

}

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬