{"action":"created","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1057","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1057/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1057/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1057/events","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/1057","id":60504956,"number":1057,"title":"IIS Express hosting System.Security.Cryptography.CryptographicException","user":{"login":"davidmrichter","id":9887781,"avatar_url":"https://avatars.githubusercontent.com/u/9887781?v=3","gravatar_id":"","url":"https://api.github.com/users/davidmrichter","html_url":"https://github.com/davidmrichter","followers_url":"https://api.github.com/users/davidmrichter/followers","following_url":"https://api.github.com/users/davidmrichter/following{/other_user}","gists_url":"https://api.github.com/users/davidmrichter/gists{/gist_id}","starred_url":"https://api.github.com/users/davidmrichter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/davidmrichter/subscriptions","organizations_url":"https://api.github.com/users/davidmrichter/orgs","repos_url":"https://api.github.com/users/davidmrichter/repos","events_url":"https://api.github.com/users/davidmrichter/events{/privacy}","received_events_url":"https://api.github.com/users/davidmrichter/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":9,"created_at":"2015-03-10T14:11:22Z","updated_at":"2015-04-08T07:04:31Z","closed_at":"2015-03-23T13:59:12Z","body":"Hello\r\n\r\nI took the identityserver3 WSFEderation Example and tried to host it on IIS\r\n\r\nNow I get the folllowing error\r\nSystem.Security.Cryptography.CryptographicException was unhandled by user code\r\n\r\n  HResult=-2147024883\r\n  Message=The data is invalid.\r\n  Source=System.Security\r\n  StackTrace:\r\n\r\n       at System.Security.Cryptography.ProtectedData.Unprotect(Byte[] encryptedData, Byte[] optionalEntropy, DataProtectionScope scope)\r\n\r\n       at System.Security.Cryptography.DpapiDataProtector.ProviderUnprotect(Byte[] encryptedData)\r\n\r\n       at System.Security.Cryptography.DataProtector.Unprotect(Byte[] encryptedData)\r\n\r\n       at Microsoft.Owin.Security.DataProtection.DpapiDataProtector.Unprotect(Byte[] protectedData) in c:\\ballen\\github\\thinktecture\\IdSrv3\\Thinktecture.IdentityServer3\\source\\Core\\Services\\Default\\DefaultCorsPolicyService.cs:line 0\r\n\r\n       at Thinktecture.IdentityServer.Core.Configuration.Hosting.HostDataProtector.Unprotect(Byte[] data, String entropy) in c:\\ballen\\github\\thinktecture\\IdSrv3\\Thinktecture.IdentityServer3\\source\\Core\\Configuration\\Hosting\\HostDataProtector.cs:line 39\r\n\r\n       at Thinktecture.IdentityServer.Core.Configuration.Hosting.DataProtectorAdapter.Unprotect(Byte[] protectedData) in c:\\ballen\\github\\thinktecture\\IdSrv3\\Thinktecture.IdentityServer3\\source\\Core\\Configuration\\Hosting\\DataProtectorAdapter.cs:line 37\r\n\r\n       at Microsoft.Owin.Security.DataHandler.SecureDataFormat`1.Unprotect(String protectedText) in c:\\ballen\\github\\thinktecture\\IdSrv3\\Thinktecture.IdentityServer3\\source\\Core\\Services\\Default\\DefaultCorsPolicyService.cs:line 0\r\n\r\n  InnerException:\r\n\r\nActually everything remained the same, except the IIS hosting.\r\nIf I do hit continue the token gets issued normally and I can use my client as before. Strange!\r\nAny idea what I missed? \r\n![error](https://cloud.githubusercontent.com/assets/9887781/6576442/9d4fbdc0-c737-11e4-892d-fcc0fa2899b5.png)\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/comments/90825127","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/1057#issuecomment-90825127","issue_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1057","id":90825127,"user":{"login":"huysentruitw","id":4618744,"avatar_url":"https://avatars.githubusercontent.com/u/4618744?v=3","gravatar_id":"","url":"https://api.github.com/users/huysentruitw","html_url":"https://github.com/huysentruitw","followers_url":"https://api.github.com/users/huysentruitw/followers","following_url":"https://api.github.com/users/huysentruitw/following{/other_user}","gists_url":"https://api.github.com/users/huysentruitw/gists{/gist_id}","starred_url":"https://api.github.com/users/huysentruitw/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/huysentruitw/subscriptions","organizations_url":"https://api.github.com/users/huysentruitw/orgs","repos_url":"https://api.github.com/users/huysentruitw/repos","events_url":"https://api.github.com/users/huysentruitw/events{/privacy}","received_events_url":"https://api.github.com/users/huysentruitw/received_events","type":"User","site_admin":false},"created_at":"2015-04-08T07:04:31Z","updated_at":"2015-04-08T07:04:31Z","body":"Got the same problem during tests on localhost. I went to chrome://settings/cookies and deleted the cookies for localhost. Problem fixed.\r\n\r\nBut how is it possible that the encryption key changes? I'm using IIS Express with the IIS Express Development Certificate. The only thing that happened before this problem were Windows updates..."}}