{"action":"opened","issue":{"url":"https://api.github.com/repos/aspnet/Security/issues/139","labels_url":"https://api.github.com/repos/aspnet/Security/issues/139/labels{/name}","comments_url":"https://api.github.com/repos/aspnet/Security/issues/139/comments","events_url":"https://api.github.com/repos/aspnet/Security/issues/139/events","html_url":"https://github.com/aspnet/Security/issues/139","id":55791348,"number":139,"title":"[Authorize] fails for OpenIdConnect","user":{"login":"brentschmaltz","id":3172421,"avatar_url":"https://avatars.githubusercontent.com/u/3172421?v=3","gravatar_id":"","url":"https://api.github.com/users/brentschmaltz","html_url":"https://github.com/brentschmaltz","followers_url":"https://api.github.com/users/brentschmaltz/followers","following_url":"https://api.github.com/users/brentschmaltz/following{/other_user}","gists_url":"https://api.github.com/users/brentschmaltz/gists{/gist_id}","starred_url":"https://api.github.com/users/brentschmaltz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/brentschmaltz/subscriptions","organizations_url":"https://api.github.com/users/brentschmaltz/orgs","repos_url":"https://api.github.com/users/brentschmaltz/repos","events_url":"https://api.github.com/users/brentschmaltz/events{/privacy}","received_events_url":"https://api.github.com/users/brentschmaltz/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-01-28T17:56:59Z","updated_at":"2015-01-28T17:56:59Z","closed_at":null,"body":"There are two problems:\r\n1. OpenIdConnectHandler always expects 'Challenge' to be non-null. A change in the runtime requires that this cannot be expected.  \r\n2. OpenIdConnectHandler sets the AuthenticationTicket.Principal property. Later, the runtime should check if AT.Identities OR AT.Principal is set."}}