SecurityService: Fix parsing and loading of jwks url

Author: whamm86

src/AasSecurity/SecurityService.cs

@@ -590,16 +590,23 @@ private string HandleBearerToken(string? bearerToken, ref string user, ref bool
                             }
                             if (jwksUrl.IsNullOrEmpty())
                             {
-                                var openIdConfig = httpClient.GetStringAsync($"{iss}/.well-known/openid-configuration").Result;
-                                var openIdConfigJson = JsonDocument.Parse(openIdConfig);
+                                jwksUrl = $"{iss}/jwks";
 
-                                string jwksUri = $"{iss}/jwks";
-                                if (openIdConfigJson.RootElement.TryGetProperty("jwks_uri", out var propJwksUri))
+                                try
+                                {
+                                    var openIdConfig = httpClient.GetStringAsync($"{iss}/.well-known/openid-configuration").Result;
+                                    var openIdConfigJson = JsonDocument.Parse(openIdConfig);
+
+                                    if (openIdConfigJson.RootElement.TryGetProperty("jwks_uri", out var propJwksUri))
+                                    {
+                                        jwksUrl = propJwksUri.GetString();
+                                    }
+                                }
+                                catch (Exception ex)
                                 {
-                                    jwksUri = propJwksUri.GetString();
+                                    _logger.LogInformation($"Could not access well-known from {iss}");
                                 }
                             }
-
                             try
                             {
                                 var jwksJson = httpClient.GetStringAsync(jwksUrl).Result;

src/AasSecurity/SecuritySettingsForServerParser.cs

@@ -149,7 +149,8 @@ private async static void ParseAuthenticationServer(AdminShellPackageEnv env, Su
                             GlobalSecurityVariables.ServerCertificates.Add(null);
                             GlobalSecurityVariables.ServerCertFileNames.Add("");
                             GlobalSecurityVariables.ServerDomain.Add(domain);
-                            GlobalSecurityVariables.ServerJwksUrl.Add(jwks);
+                            GlobalSecurityVariables.ServerJwksUrl.Add(jwks);
+                            GlobalSecurityVariables.ServerIssuerUrl.Add("");
                             GlobalSecurityVariables.ServerKid.Add(kid);
                         }
                         else if (line.Contains("BEGIN CERTIFICATE"))
@@ -166,7 +167,8 @@ private async static void ParseAuthenticationServer(AdminShellPackageEnv env, Su
                             GlobalSecurityVariables.ServerCertificates.Add(x509);
                             GlobalSecurityVariables.ServerCertFileNames.Add(serverName + ".cer");
                             GlobalSecurityVariables.ServerDomain.Add(domain);
-                            GlobalSecurityVariables.ServerJwksUrl.Add("");
+                            GlobalSecurityVariables.ServerJwksUrl.Add("");
+                            GlobalSecurityVariables.ServerIssuerUrl.Add("");
                             GlobalSecurityVariables.ServerKid.Add("");
                         }
                         else if (insideBas64)
@@ -336,6 +338,7 @@ private async static void ParseAuthenticationServer(AdminShellPackageEnv env, Su
                         GlobalSecurityVariables.ServerCertFileNames.Add(serverName + ".cer");
                         GlobalSecurityVariables.ServerDomain.Add(domain);
                         GlobalSecurityVariables.ServerIssuerUrl.Add(issuer);
+                        GlobalSecurityVariables.ServerJwksUrl.Add("");
                         GlobalSecurityVariables.ServerKid.Add(kid);
                     }
                 }