Error when Ending Session

[petersameh]

IdentityServer version

7.0.8

.NET version

8

Description

I get this error when ending session, but I am not sure what is the reason.

Error processing end session request Invalid request

JWT token validation error: IDX10503: Signature validation failed. Token does not have a kid. Keys tried: '[PII of type 'System.Text.StringBuilder' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]'. Number of keys in TokenValidationParameters: '1'. Number of keys in Configuration: '0'. Exceptions caught: '[PII of type 'System.String' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]'. token: '[PII of type 'Microsoft.IdentityModel.JsonWebTokens.JsonWebToken' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]'. See https://aka.ms/IDX10503 for details.

Reproduction steps

When calling end session from a specific client

Expected behavior

To end session without any errors

Logs

IDX10503: Signature validation failed. Token does not have a kid. Keys tried: '[PII of type 'System.Text.StringBuilder' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]'. Number of keys in TokenValidationParameters: '1'. 
Number of keys in Configuration: '0'. 
Exceptions caught:
 '[PII of type 'System.String' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]'.
token: '[PII of type 'Microsoft.IdentityModel.JsonWebTokens.JsonWebToken' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]'. See https://aka.ms/IDX10503 for details.

Additional context

No response

[RolandGuijt]

Most likely in your scenario when logging out the identity token is send along with the logout request in the id_token_hint parameter.
This error means that when during validation of the token, it failed to do so, because the key that was used to sign the JWT was unknown.

The most common way for that to happen is if you have a data protection problem in your identity server. Can you please check out this document and see if you have it configured correctly?