Hi,
I have implemented the azure AD connection. But some times i get a LoginError and a banned IP.
Error message:
SQL Injection detected from ip : (Match on QueryString LoginError); expression: (?:'|%27|%22|%26|%3B|;|%3D|%23|%00|%7c|--)(?![ |:|>|{|}]+)(?![A-Za-z0-9]{2,}).{1,}?(?:'|%27|%22|%3B|%3D|%23|%00|%7c|=|%3e|>) key: LoginError; value: IDX21323: RequireNonce is '[PII is hidden. For more details, see https://aka.ms/IdentityModel/PII.]'. OpenIdConnectProtocolValidationContext.Nonce was null, OpenIdConnectProtocol.ValidatedIdToken.Payload.Nonce was not null. The nonce cannot be validated. If you don't need to check the nonce, set OpenIdConnectProtocolValidator.RequireNonce to 'false'.
Has anyone had the same issue?
/Andreas
