Invalid non-ASCII or control character in header: 0x000D exception about active-directory-b2c-dotnetcore-webapp

[winterscoding]

I had this exception - but it was masking the real error returned by the API.

I changed the error handling code to look like this, using some RegEx to strip out the non-displayable characters:

    // Handle sign-in errors differently than generic errors.
    private Task RemoteFailure(FailureContext context)
    {
        context.HandleResponse();
        var message = Regex.Replace(context.Failure.Message, @"[^\u001F-\u007F]+", string.Empty);
        context.Response.Redirect("/Home/Error?message=" + message);
        return Task.FromResult(0);
    }

It turned out (in my case) that the real error had been:

Message contains error: 'unauthorized_client', error_description: 'AADSTS70001: Application '[GUID]' is not supported for this API version.

[zemien]

Some further testing: After the exception occurs, I tried navigating directly to http://localhost:5000/Session/EditProfile and it pops up with the Edit Profile page with my user details populated. I click Continue and I return to the app as the fully authenticated user. No exception.

[parakhj]

This post indicates it may have to do with you calling an http url. Perhaps try the https version?

[parakhj]

AADSTS70001 The STS means you are hitting the Azure AD endpoint, not Azure AD B2C. Is that intended?

[jmprieur]

Closing this issue as this sample is being archived and replaced by a newer ASP.NET Core 3.1 sample.
See Readme.md