google.api.auth , ValidateAsync , no valid signature

hello ,

im using your .net client for my backend server for token validation. in a .net standard class lib.

i use > GoogleJsonWebSignature.ValidateAsync() this code internal gives me false back.

#elif NETSTANDARD1_3 || NETSTANDARD2_0
                    verifiedOk = googleCert.VerifyHash(hash, signature, HashAlgorithmName.SHA256, RSASignaturePadding.Pkcs1);
#else

verifyhash runs the code in Microsoft.NETCore.App\2.2.2\System.Security.Cryptography.Algorithms, Version=4.3.1.0 hope this is correct ? if the assamly is wrong , that would explain why false my result is false.

the id token wich i get, comes directly from a unity google client. https://github.com/googlesamples/google-signin-unity

i tested the token at jwt.io there is the signitur false too. but they dont have the private key. i get all correct informations at jwt.io from the token. its a RSA 256 key wich is supported.

this workflow runs well at last year okt.2018. now suddendly the validation fails 😦 with no changes by my side .

thanks for help.

[jskeet]

.NET Core isn’t unsupported. Please just use the real NuGet package: Google.Apis.Auth. That supports netstandard1.3 and netstandard2.0. It’ll be much easier to help if we’re all looking at the same code. If you could provide a short but complete example demonstrating the problem, ideally as a console app, that would be even better.

[jmeyerworms]

ah ok 😉 great