ASP.NET Core 2.2 Signature validation failed in JwtBearer Authentication (just in Linux/MacOS)

Describe the bug

After updating to 2.2 RSA signature cant’ be verify in Linux and MacOS ( in windows it is ok). I use this code in the startup to set authentication:

  services.AddAuthentication(options =>
            {
                options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
                options.DefaultSignInScheme = JwtBearerDefaults.AuthenticationScheme;
                options.DefaultScheme = JwtBearerDefaults.AuthenticationScheme;
            })
            .AddJwtBearer(config =>
            {
                config.Events = new API.Core.Security.JwtBearerEvents();
                config.RequireHttpsMetadata = !CurrentEnvironment.IsDevelopment();
                config.IncludeErrorDetails = CurrentEnvironment.IsDevelopment();
                config.SaveToken = true;
                config.TokenValidationParameters = new TokenValidationParameters()
                {
                    RequireSignedTokens = true,
                    ValidateIssuerSigningKey = true,
                    ValidateLifetime = true,
                    ValidateAudience = false,
                    ValidateIssuer = false,
                    IssuerSigningKey = new RsaSecurityKey(rsa)
                };

            });

After update in any endpoint with [Authorize] attribute in Linux or MacOS authentication middleware throw can’t verify signature error. in Older version or in windows it works just fine.

To Reproduce

Steps to reproduce the behavior:

1. Using this version of ASP.NET Core ‘2.2.101’
2. Add AddJwtBearer in Authentication
3. Run in Linux/MacOs
4. Call endpoint with [Authorize]
5. See the error

[Tratcher]

Update your IdentityModel dependencies to 5.4. https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/issues/1067#issuecomment-456445438

[Eilon]

Sorry for the confusion, we must have mis-understood it. Re-opening so we can evaluate again.