{"action":"created","issue":{"url":"https://api.github.com/repos/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/issues/176","labels_url":"https://api.github.com/repos/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/issues/176/labels{/name}","comments_url":"https://api.github.com/repos/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/issues/176/comments","events_url":"https://api.github.com/repos/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/issues/176/events","html_url":"https://github.com/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/issues/176","id":116575080,"number":176,"title":"'iat' claim in ID Token is not a JSON number as required in the spec.","user":{"login":"mebehagen","id":6781674,"avatar_url":"https://avatars.githubusercontent.com/u/6781674?v=3","gravatar_id":"","url":"https://api.github.com/users/mebehagen","html_url":"https://github.com/mebehagen","followers_url":"https://api.github.com/users/mebehagen/followers","following_url":"https://api.github.com/users/mebehagen/following{/other_user}","gists_url":"https://api.github.com/users/mebehagen/gists{/gist_id}","starred_url":"https://api.github.com/users/mebehagen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mebehagen/subscriptions","organizations_url":"https://api.github.com/users/mebehagen/orgs","repos_url":"https://api.github.com/users/mebehagen/repos","events_url":"https://api.github.com/users/mebehagen/events{/privacy}","received_events_url":"https://api.github.com/users/mebehagen/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/labels/bug","name":"bug","color":"fc2929"},{"url":"https://api.github.com/repos/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/labels/important","name":"important","color":"eb6420"}],"state":"closed","locked":false,"assignee":{"login":"PinpointTownes","id":6998306,"avatar_url":"https://avatars.githubusercontent.com/u/6998306?v=3","gravatar_id":"","url":"https://api.github.com/users/PinpointTownes","html_url":"https://github.com/PinpointTownes","followers_url":"https://api.github.com/users/PinpointTownes/followers","following_url":"https://api.github.com/users/PinpointTownes/following{/other_user}","gists_url":"https://api.github.com/users/PinpointTownes/gists{/gist_id}","starred_url":"https://api.github.com/users/PinpointTownes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/PinpointTownes/subscriptions","organizations_url":"https://api.github.com/users/PinpointTownes/orgs","repos_url":"https://api.github.com/users/PinpointTownes/repos","events_url":"https://api.github.com/users/PinpointTownes/events{/privacy}","received_events_url":"https://api.github.com/users/PinpointTownes/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/milestones/3","html_url":"https://github.com/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/milestones/1.0.0-beta4","labels_url":"https://api.github.com/repos/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/milestones/3/labels","id":1246651,"number":3,"title":"1.0.0-beta4","description":"","creator":{"login":"PinpointTownes","id":6998306,"avatar_url":"https://avatars.githubusercontent.com/u/6998306?v=3","gravatar_id":"","url":"https://api.github.com/users/PinpointTownes","html_url":"https://github.com/PinpointTownes","followers_url":"https://api.github.com/users/PinpointTownes/followers","following_url":"https://api.github.com/users/PinpointTownes/following{/other_user}","gists_url":"https://api.github.com/users/PinpointTownes/gists{/gist_id}","starred_url":"https://api.github.com/users/PinpointTownes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/PinpointTownes/subscriptions","organizations_url":"https://api.github.com/users/PinpointTownes/orgs","repos_url":"https://api.github.com/users/PinpointTownes/repos","events_url":"https://api.github.com/users/PinpointTownes/events{/privacy}","received_events_url":"https://api.github.com/users/PinpointTownes/received_events","type":"User","site_admin":false},"open_issues":0,"closed_issues":23,"state":"open","created_at":"2015-08-08T18:06:59Z","updated_at":"2015-11-17T20:13:42Z","due_on":null,"closed_at":null},"comments":1,"created_at":"2015-11-12T15:40:44Z","updated_at":"2015-11-17T20:13:42Z","closed_at":"2015-11-17T20:13:42Z","body":"The OpenID Connect Core 1.0 specification requires the ID Token claim \"iat\" to be a JSON number. Currently it is added as a string. Some clients (e.g. OpenAM) have trouble validating this token.\r\n"},"comment":{"url":"https://api.github.com/repos/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/issues/comments/157492432","html_url":"https://github.com/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/issues/176#issuecomment-157492432","issue_url":"https://api.github.com/repos/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/issues/176","id":157492432,"user":{"login":"PinpointTownes","id":6998306,"avatar_url":"https://avatars.githubusercontent.com/u/6998306?v=3","gravatar_id":"","url":"https://api.github.com/users/PinpointTownes","html_url":"https://github.com/PinpointTownes","followers_url":"https://api.github.com/users/PinpointTownes/followers","following_url":"https://api.github.com/users/PinpointTownes/following{/other_user}","gists_url":"https://api.github.com/users/PinpointTownes/gists{/gist_id}","starred_url":"https://api.github.com/users/PinpointTownes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/PinpointTownes/subscriptions","organizations_url":"https://api.github.com/users/PinpointTownes/orgs","repos_url":"https://api.github.com/users/PinpointTownes/repos","events_url":"https://api.github.com/users/PinpointTownes/events{/privacy}","received_events_url":"https://api.github.com/users/PinpointTownes/received_events","type":"User","site_admin":false},"created_at":"2015-11-17T20:13:42Z","updated_at":"2015-11-17T20:13:42Z","body":"Thanks for reporting this bug! :+1: \r\n\r\nFYI, this bug was only impacting the OWIN/Katana version and was just fixed as part of this commit: https://github.com/aspnet-contrib/AspNet.Security.OpenIdConnect.Server/commit/c713e70e5146e15455942ea932f2c6aa66afca90\r\n\r\nIt will be included in the next beta4 version, that should be released soon :clap: "}}