{"action":"created","issue":{"url":"https://api.github.com/repos/aspnet/Security/issues/179","labels_url":"https://api.github.com/repos/aspnet/Security/issues/179/labels{/name}","comments_url":"https://api.github.com/repos/aspnet/Security/issues/179/comments","events_url":"https://api.github.com/repos/aspnet/Security/issues/179/events","html_url":"https://github.com/aspnet/Security/issues/179","id":60349303,"number":179,"title":"OpenIdConnect nonce cookies - overflow handling","user":{"login":"loctanvo","id":94643,"avatar_url":"https://avatars.githubusercontent.com/u/94643?v=3","gravatar_id":"","url":"https://api.github.com/users/loctanvo","html_url":"https://github.com/loctanvo","followers_url":"https://api.github.com/users/loctanvo/followers","following_url":"https://api.github.com/users/loctanvo/following{/other_user}","gists_url":"https://api.github.com/users/loctanvo/gists{/gist_id}","starred_url":"https://api.github.com/users/loctanvo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/loctanvo/subscriptions","organizations_url":"https://api.github.com/users/loctanvo/orgs","repos_url":"https://api.github.com/users/loctanvo/repos","events_url":"https://api.github.com/users/loctanvo/events{/privacy}","received_events_url":"https://api.github.com/users/loctanvo/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":43,"created_at":"2015-03-09T14:19:05Z","updated_at":"2015-09-11T16:14:42Z","closed_at":"2015-06-04T22:31:45Z","body":"This issue was originally posted on CodePlex in the Katana issue tracker. Since the OIDC middleware has been moved to this project, I'm now opening an issue here instead. \r\n\r\nPlease read the conversation there before adding comments here.\r\n\r\nhttp://katanaproject.codeplex.com/workitem/402\r\n"},"comment":{"url":"https://api.github.com/repos/aspnet/Security/issues/comments/139588912","html_url":"https://github.com/aspnet/Security/issues/179#issuecomment-139588912","issue_url":"https://api.github.com/repos/aspnet/Security/issues/179","id":139588912,"user":{"login":"whoever123","id":5599527,"avatar_url":"https://avatars.githubusercontent.com/u/5599527?v=3","gravatar_id":"","url":"https://api.github.com/users/whoever123","html_url":"https://github.com/whoever123","followers_url":"https://api.github.com/users/whoever123/followers","following_url":"https://api.github.com/users/whoever123/following{/other_user}","gists_url":"https://api.github.com/users/whoever123/gists{/gist_id}","starred_url":"https://api.github.com/users/whoever123/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/whoever123/subscriptions","organizations_url":"https://api.github.com/users/whoever123/orgs","repos_url":"https://api.github.com/users/whoever123/repos","events_url":"https://api.github.com/users/whoever123/events{/privacy}","received_events_url":"https://api.github.com/users/whoever123/received_events","type":"User","site_admin":false},"created_at":"2015-09-11T16:14:42Z","updated_at":"2015-09-11T16:14:42Z","body":"Thank you so much for the follow up.  Is there any particular version, step or configuration I need for this to apply?  I run into this issue a few month ago when going through IdentityServer3 MVC walkthrough sample.  I think already have all the latest nuget packages this time around by starting from scratch.  \r\n\r\nNothing too complicated, just one Identity Server and two sample MVC apps sitting on 3 servers.  Now two hours later, I try to logon to one of the app, still got bad request."}}