Microsoft.Identity.Web OpenIdConnect was not authenticated. Failure message: Not authenticated - azure-active-directory

Question

My app had been working with Microsoft.Identity for the past couple of years and something changed that is causing users to have to clear cache to authenticate. I have verified reply url's, the tenant id, client id and client secret and they all have not changed and are correctly setup. I updated to the latest nuget package. And after clearing browser cache the authentication works perfectly. What could be causing this?
public void ConfigureServices(IServiceCollection services)
{
services.Configure<CookiePolicyOptions>(options =>
{
options.CheckConsentNeeded = context => false;
options.MinimumSameSitePolicy = SameSiteMode.Unspecified;
options.HandleSameSiteCookieCompatibility();
});
services.AddMicrosoftIdentityWebAppAuthentication(Configuration, "AzureAd");
//services.AddSignIn(Configuration);
// Token acquisition service based on MSAL.NET
app.UseHttpsRedirection();
app.UseStaticFiles();
app.UseCookiePolicy();
app.UseRouting();
app.UseCors(MyAllowSpecificOrigins);
app.UseAuthentication();
app.UseSession();
app.UseMiddleware<UserClaims>();
app.UseAuthorization();
Microsoft.AspNetCore.Hosting.Diagnostics: Information: Request starting HTTP/2.0 POST https://localhost:44326/signin-oidc application/x-www-form-urlencoded 3217
Microsoft.AspNetCore.Cors.Infrastructure.CorsService: Information: CORS policy execution successful.
Microsoft.AspNetCore.Authentication.Cookies.CookieAuthenticationHandler: Information: AuthenticationScheme: Cookies signed in.
Microsoft.AspNetCore.Hosting.Diagnostics: Information: Request finished in 626.0063ms 302
Microsoft.AspNetCore.Hosting.Diagnostics: Information: Request starting HTTP/2.0 GET https://localhost:44326/
Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectHandler: Information: OpenIdConnect was not authenticated. Failure message: Not authenticated
Microsoft.AspNetCore.Authorization.DefaultAuthorizationService: Information: Authorization failed.
Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectHandler: Information: AuthenticationScheme: OpenIdConnect was challenged.
Microsoft.AspNetCore.Hosting.Diagnostics: Information: Request finished in 225.1113ms 302

Answer 1

Please make sure to add authentication middleware in order that app.UseAuthentication(); comes before app.UseMvc();
app.UseAuthentication();
app.UseAuthorization();
Note that AddMicrosoftIdentityWebApp is using its own cookie (auth) provider
instead using the existing one (maybe After being upgraded).
Try using by making cookiescheme to null
services.AddAuthentication() .AddMicrosoftIdentityWebApp(Configuration,"AzureAd", "AzureAD", cookieScheme: null);
or
try to explicity add the schemes so that scheme is able to handles exceptions of challenge errors like 401.
For that you may need to call AddAuthentication() and configure a default challenge schemes something like this.
services.AddAuthentication(OpenIdConnectDefaults.AuthenticationScheme)
.AddMicrosoftIdentityWebApp(Configuration.GetSection("AzureAd"))
NOTE: AddAuthentication() method actually configures the service to add cookie-based authentication.This cookie used in browser scenarios and also to set the challenge to OpenID Connect.
and register Microsoft Identity routes with one call minumum to endpoints.MapControllerRoute() or a call to endpoints.MapControllers().
or
services.Configure<CookiePolicyOptions>(options =>
{
options.CheckConsentNeeded = context => true;
options.MinimumSameSitePolicy = SameSiteMode.None;
});
services.AddAuthentication(AzureADDefaults.AuthenticationScheme)
.AddAzureAD(options => Configuration.Bind("AzureAd", options));
services.Configure<OpenIdConnectOptions>(AzureADDefaults.OpenIdScheme, options =>
{
options.Authority = options.Authority + "/v2.0/";
options.TokenValidationParameters.ValidateIssuer = false;
});
Please check microsoft-identity-web issues in github
References:
aspnetcore-webapp-openidconnect-v2 (github.com)
asp.net mvc - IdentityServer4 - Stack Overflow
Stack Overflow reference