Azure B2C - 无法从策略中的 JWT 客户端断言令牌读取“日期”声明

Question

I'm not able to read date claim from JWT client assertion token and then transform into "datetime" claim by transformation method "ConvertDateToDateTimeClaim". I've tried below date formats in claim but none works. It works as excepted, When I set Default values of Date claim in B2C policy.

JWT Token: { "createdDate1": "2019-05-26", "createdDate2": "2019-05-26T00:00:00", "createdDate3": "2019-05-26T00:00:00Z", "verifiedEmail": "xxxxxxxxxxxxxxx", "nbf": 1560005928, "exp": 1560006228, "iss": "xxxxxxxxxxxxxxxxxxxx", "aud": "xxxxxxxxxxxxxxxxxxxxx" }

Error: The data type 'String' of the claim with id 'createdDate' does not match the DataType 'Date' of ClaimType with id 'createdDate' specified in the policy.

B2C Policy

Help required.

Answer 1

There was a bug trying to read a dateTime claim from the JWT in the id_token_hint parameter. It got fixed this week. I could imagine it is the same with a date claim.

I create a JWT with the following claim:

DateTime unixEpoch = new DateTime(1970, 1, 1, 0, 0, 0, DateTimeKind.Utc);
new System.Security.Claims.Claim("LinkExpirationDateTime", ((long)(DateTime.UtcNow.AddMinutes(_appSettings.LinkExpiresAfterMinutes) - unixEpoch).TotalSeconds).ToString(), System.Security.Claims.ClaimValueTypes.DateTime, issuer)

You can read it like shown in some samples on https://github.com/azure-ad-b2c/samples/ ("Email delivered account redemption link" for example). The ClaimType would be:

<ClaimType Id="LinkExpirationDateTime">
    <DisplayName>LinkExpirationDateTime</DisplayName>
    <DataType>dateTime</DataType>
</ClaimType>