diff --git a/src/Microsoft.IdentityModel.Tokens/Validation/ValidationParameters.cs b/src/Microsoft.IdentityModel.Tokens/Validation/ValidationParameters.cs index b4a792a1cb..f2aa5e8bf4 100644 --- a/src/Microsoft.IdentityModel.Tokens/Validation/ValidationParameters.cs +++ b/src/Microsoft.IdentityModel.Tokens/Validation/ValidationParameters.cs @@ -93,6 +93,7 @@ protected ValidationParameters(ValidationParameters other) _signatureValidator = other.SignatureValidator; TimeProvider = other.TimeProvider; TryAllDecryptionKeys = other.TryAllDecryptionKeys; + TryAllIssuerSigningKeys = other.TryAllIssuerSigningKeys; TokenDecryptionKeyResolver = other.TokenDecryptionKeyResolver; _tokenDecryptionKeys = other.TokenDecryptionKeys; TokenReplayCache = other.TokenReplayCache; @@ -114,6 +115,7 @@ public ValidationParameters() LogTokenId = true; SaveSigninToken = false; TryAllDecryptionKeys = true; + TryAllIssuerSigningKeys = true; ValidateActor = false; } @@ -529,7 +531,8 @@ public TokenReplayValidationDelegate TokenReplayValidator /// If the IssuerSigningKeyResolver is unable to resolve the key when validating the signature of the SecurityToken, /// all available keys will be tried. /// - /// Default is false. + /// Default is true. + [DefaultValue(true)] public bool TryAllIssuerSigningKeys { get; set; } /// @@ -642,6 +645,7 @@ internal set /// Gets or sets a boolean that controls if the actor claim should be validated. /// /// Default value is false. + [DefaultValue(false)] public bool ValidateActor { get; set; } } }