Errors since upgrading to .NET 9

[Cerebellum90]

Since we've upgraded our IdentityServer instance to .NET9, we've been having a lot of errors like;
-client_id is missing or too long
-Request validation failed
on the "connect/authorize/callback" endpoint.

Eventually the authentication will work, the user has no noticable issues with this.

An example of a decoded request with the error client_id is missing or too long, is this:

It seems it's expired. How come we still get requests with these payloads?

Also, we've been having loads of OperationCanceledException's and TaskCanceledExceptions when users quit there session (close browser, navigate back, etc). Is there anything we can do about this? No logging etc?

Thanks in advance!

[RolandGuijt]

Just to rule this out: are all Microsoft.IdentityModel.* packages on the right version? Within one project the versions of these packages must be exactly the same. That also goes for the references other used packages might have.
NuGet doesn't enforce this but we've created a document that might help.

Can you please try the suggestions in there and report back?

[Cerebellum90]

@RolandGuijt thank you for your response. We indeed had some minor version inconsistancies. Upgraded all .IdentityModel. packages to 8.9.0 and ran for a day +.
Still the same amount of errors;

Also, a lot of the requests-body's in case of the "client_id missing or too long"-errors, are expired;

Maybe this gives some more material to work with?
Thanks in advance!

[RolandGuijt]

Do you have explicit references to the IdentityModel packages in your project file? If so can you please try removing them to see if that solves anything?

[Cerebellum90]

Hi @RolandGuijt We've had no explicit references to IdentityModel packages.
So far, no change in the ammount of errors.
Also, quite some OperationCancelled exceptions occur, from places like PersistedGrantStore, etc.
Feels like all the logging is quite fanatic.