[BUG] 500 Error when GetToken called in Azure App Service, but not when run locally in VS 2022 about azure-sdk-for-net HOT 6 OPEN

Thank you for your feedback. Tagging and routing to the team member best able to assist.

from azure-sdk-for-net.

@MikeYeager: Would you please provide the full error message and stack trace that you're seeing? This sounds like an issue with the MI endpoint on the host rather than the request being made by the credential. The additional context will help us to validate the best path forward for assistance.

from azure-sdk-for-net.

Hi @MikeYeager. Thank you for opening this issue and giving us the opportunity to assist. To help our team better understand your issue and the details of your scenario please provide a response to the question asked above or the information requested above. This will help us more accurately address your issue.

from azure-sdk-for-net.

Here is the exception info:

Exception Stack:

ManagedIdentityCredential authentication failed: Service request failed.
Status: 500 (Internal Server Error)

Content:
{"statusCode":500,"message":"An unexpected error occured while fetching the AAD Token.","correlationId":"8997f3a2-4774-4406-bcc2-14da6f7c387a"}

Headers:
Transfer-Encoding: chunked
X-CORRELATION-ID: REDACTED
Content-Type: application/json; charset=utf-8
Date: Thu, 20 Jun 2024 22:40:35 GMT
Server: Kestrel

See the troubleshooting guide for more information. https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fu19054072.ct.sendgrid.net%2Fls%2Fclick%3Fupn%3Du001.jY5FA2o0QMCl0M6PhFnw5dYkXNFw1nMhCoCogaarRkW81prb5tlqi1sy4ecWk0aPdP615-2Bnz43gKJGtQkVg7xDOGn-2B-2FNhbkP1haa6zQzj-2F3SZTyZ5fEGOR-2FR2Fiujwog0myc_zqcr9iRqRSjyoMdNqqwpCIDehA9svmT3MXccNrdqzLviqeGMtqlPGrw1HKD8dk853ejwaVBpRgaQ5KgL1jFTUxIEYpvi-2FHpeVKYbtYTNqvfhN0IYuH2U2TyQvGIDgnuYpvRCAp2Xw0bpKCA9el4wTqABu9dMKn6RwH9TPsWVMiYcWqoyA4JuBP6kuTR5h6-2BYjBdBlutdf1BKDXpcHv77qw-3D-3D&data=05%7C02%7Cmyeager%40eps-software.com%7Ccbdef1e062af4c2807c708dc917a0118%7C24db396bb79545c9bcfad3559193f2f7%7C0%7C0%7C638545200432695770%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=C3o0R9HasdbY%2BO2gfG2Bv8XbAtv3Qgr9zIDVGuZovxk%3D&reserved=0 Exception Attributes:
Message: ManagedIdentityCredential authentication failed: Service request failed.
Status: 500 (Internal Server Error)

Content:
{"statusCode":500,"message":"An unexpected error occured while fetching the AAD Token.","correlationId":"8997f3a2-4774-4406-bcc2-14da6f7c387a"}

Headers:
Transfer-Encoding: chunked
X-CORRELATION-ID: REDACTED
Content-Type: application/json; charset=utf-8
Date: Thu, 20 Jun 2024 22:40:35 GMT
Server: Kestrel

See the troubleshooting guide for more information. https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fu19054072.ct.sendgrid.net%2Fls%2Fclick%3Fupn%3Du001.jY5FA2o0QMCl0M6PhFnw5dYkXNFw1nMhCoCogaarRkW81prb5tlqi1sy4ecWk0aPdP615-2Bnz43gKJGtQkVg7xDOGn-2B-2FNhbkP1haa6zQzj-2F3SZTyZ5fEGOR-2FR2FiujwogSxe9_zqcr9iRqRSjyoMdNqqwpCIDehA9svmT3MXccNrdqzLviqeGMtqlPGrw1HKD8dk853ejwaVBpRgaQ5KgL1jFTU-2BA3ewbCWE9oFHFITqmLtI9VLHU9v-2FKfMWiU5QhK-2FqO-2BdwdnxRlepk-2BdhEENzaGMZGUlkUjPfm-2FYOv9F4AC4nm6Lr5XeAW5HgQwvyCOf04tILY-2FNu-2B5reqBkw6Hrd-2Fcb-2Fg-3D-3D&data=05%7C02%7Cmyeager%40eps-software.com%7Ccbdef1e062af4c2807c708dc917a0118%7C24db396bb79545c9bcfad3559193f2f7%7C0%7C0%7C638545200432706092%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=Vnrkg%2FNzSaMvbv%2B1zWpDoG1M3aPvZwWZWYzMq%2BOfvfo%3D&reserved=0
Exception type: Azure.Identity.AuthenticationFailedException
Source: Azure.Identity
Thrown by code in method: FailWrapAndThrow
Thrown by code in class: CredentialDiagnosticScope
Stack Trace:
Method: Azure.Identity.CredentialDiagnosticScope.FailWrapAndThrow(Exception ex, String additionalMessage, Boolean isCredentialUnavailable) Method: Azure.Identity.ManagedIdentityCredential.d__16.MoveNext() Method: --- End of stack trace from previous location where exception was thrown --- Method: System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() Method: System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) Method: Azure.Identity.ManagedIdentityCredential.GetToken(TokenRequestContext requestContext, CancellationToken cancellationToken) Method: Azure.Identity.DefaultAzureCredential.d__14.MoveNext() Method: --- End of stack trace from previous location where exception was thrown --- Method: System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() Method: System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) Method: Azure.Identity.DefaultAzureCredential.d__12.MoveNext() Method: --- End of stack trace from previous location where exception was thrown --- Method: System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() Method: Azure.Identity.CredentialDiagnosticScope.FailWrapAndThrow(Exception ex, String additionalMessage, Boolean isCredentialUnavailable) Method: Azure.Identity.DefaultAzureCredential.d__12.MoveNext() Method: --- End of stack trace from previous location where exception was thrown --- Method: System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() Method: System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) Method: Azure.Identity.DefaultAzureCredential.GetToken(TokenRequestContext requestContext, CancellationToken cancellationToken) Line #: 18 -- Method: RDNG.Reporting.ORM.CIARedDogEntities..ctor() -- Source File: C:\Repos\CIA\RDNG\Reporting\RDNG.Reporting.ORM\Partials\CIARedDogEntities.cs
Line #: 24 -- Method: RDNG.ReportGenerator.Reports.IncomeStatementModel.GenerateReport(IncomeStatementParameters parameters, String userLogin) -- Source File: C:\Repos\CIA\RDNG\Reporting\RDNG.ReportGenerator\ReportModels\Accounting\IncomeStatementModel.cs
Line #: 170 -- Method: RDNG.ReportingServices.WebAPI.Controllers.AccountingController.IncomeStatement(IncomeStatementParameters parms) -- Source File: C:\Repos\CIA\RDNG\Reporting\RDNG.ReportingServices.WebAPI\Controllers\AccountingController.cs

Service request failed.
Status: 500 (Internal Server Error)

Content:
{"statusCode":500,"message":"An unexpected error occured while fetching the AAD Token.","correlationId":"8997f3a2-4774-4406-bcc2-14da6f7c387a"}

Headers:
Transfer-Encoding: chunked
X-CORRELATION-ID: REDACTED
Content-Type: application/json; charset=utf-8
Date: Thu, 20 Jun 2024 22:40:35 GMT
Server: Kestrel
Exception Attributes:
Message: Service request failed.
Status: 500 (Internal Server Error)

Content:
{"statusCode":500,"message":"An unexpected error occured while fetching the AAD Token.","correlationId":"8997f3a2-4774-4406-bcc2-14da6f7c387a"}

Headers:
Transfer-Encoding: chunked
X-CORRELATION-ID: REDACTED
Content-Type: application/json; charset=utf-8
Date: Thu, 20 Jun 2024 22:40:35 GMT
Server: Kestrel

Exception type: Azure.RequestFailedException
Source: Azure.Identity
Thrown by code in method: MoveNext
Thrown by code in class: <HandleResponseAsync>d__11

Stack Trace:
Method: Azure.Identity.ManagedIdentitySource.d__11.MoveNext() Method: --- End of stack trace from previous location where exception was thrown --- Method: System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() Method: System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) Method: Azure.Identity.ManagedIdentitySource.d__10.MoveNext() Method: --- End of stack trace from previous location where exception was thrown --- Method: System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() Method: System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) Method: Azure.Identity.ManagedIdentityClient.d__17.MoveNext() Method: --- End of stack trace from previous location where exception was thrown --- Method: System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() Method: System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) Method: Azure.Identity.ManagedIdentityClient.d__18.MoveNext() Method: --- End of stack trace from previous location where exception was thrown --- Method: System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() Method: System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) Method: Microsoft.Identity.Client.Internal.Requests.ClientCredentialRequest.d__5.MoveNext() Method: --- End of stack trace from previous location where exception was thrown --- Method: System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() Method: System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) Method: Microsoft.Identity.Client.Internal.Requests.ClientCredentialRequest.d__4.MoveNext() Method: --- End of stack trace from previous location where exception was thrown --- Method: System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() Method: System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) Method: Microsoft.Identity.Client.Internal.Requests.ClientCredentialRequest.d__3.MoveNext() Method: --- End of stack trace from previous location where exception was thrown --- Method: System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() Method: System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) Method: Microsoft.Identity.Client.Internal.Requests.RequestBase.<>c__DisplayClass11_1.<b__1>d.MoveNext() Method: --- End of stack trace from previous location where exception was thrown --- Method: System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() Method: System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) Method: Microsoft.Identity.Client.Utils.StopwatchService.d__4.MoveNext() Method: --- End of stack trace from previous location where exception was thrown --- Method: System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() Method: System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) Method: Microsoft.Identity.Client.Internal.Requests.RequestBase.d__11.MoveNext() Method: --- End of stack trace from previous location where exception was thrown --- Method: System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() Method: System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) Method: Microsoft.Identity.Client.ApiConfig.Executors.ConfidentialClientExecutor.d__3.MoveNext() Method: --- End of stack trace from previous location where exception was thrown --- Method: System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() Method: System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) Method: Azure.Identity.AbstractAcquireTokenParameterBuilderExtensions.d__0`1.MoveNext() Method: --- End of stack trace from previous location where exception was thrown --- Method: System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() Method: System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) Method: Azure.Identity.MsalConfidentialClient.d__21.MoveNext() Method: --- End of stack trace from previous location where exception was thrown --- Method: System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() Method: System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) Method: Azure.Identity.MsalConfidentialClient.d__20.MoveNext() Method: --- End of stack trace from previous location where exception was thrown --- Method: System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() Method: System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) Method: Azure.Identity.ManagedIdentityClient.d__16.MoveNext() Method: --- End of stack trace from previous location where exception was thrown --- Method: System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() Method: System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) Method: Azure.Identity.ManagedIdentityCredential.d__16.MoveNext()

from azure-sdk-for-net.

Hi @MikeYeager - Could you try this step from the troubleshooting guide to see if you get a token this way?

from azure-sdk-for-net.

Hi @MikeYeager. Thank you for opening this issue and giving us the opportunity to assist. To help our team better understand your issue and the details of your scenario please provide a response to the question asked above or the information requested above. This will help us more accurately address your issue.

from azure-sdk-for-net.