Using dotnet auth with SnapStart under dev env with minimal api and AspNetCoreServer.Hosting throws exception

[McDoit]

Describe the bug

Adding SnapStart to a lambda that is using AspNetCoreServer.Hosting with warmup calls via AddAWSLambdaBeforeSnapshotRequest fails

Using dotnet auth with SnapStart with minimal api and AspNetCoreServer.Hosting throws exception
System.InvalidOperationException: Cannot resolve scoped service Microsoft.AspNetCore.Authentication.IAuthenticationHandlerProvider' from root provider.

For some reason its triggered in DeveloperExceptionPageMiddleware, and only shows up in the Development aspnet_environment setting

Regression Issue

• Select this option if this issue appears to be a regression.

Expected Behavior

To not throw on warmup

Current Behavior

Throws this exception:

fail: Microsoft.AspNetCore.Diagnostics.DeveloperExceptionPageMiddleware[1]
An unhandled exception has occurred while executing the request.
System.InvalidOperationException: Cannot resolve scoped service 'Microsoft.AspNetCore.Authentication.IAuthenticationHandlerProvider' from root provider.
at Microsoft.Extensions.DependencyInjection.ServiceLookup.CallSiteValidator.ValidateResolution(ServiceCallSite callSite, IServiceScope scope, IServiceScope rootScope)
at Microsoft.Extensions.DependencyInjection.ServiceProvider.GetService(ServiceIdentifier serviceIdentifier, ServiceProviderEngineScope serviceProviderEngineScope)
at Microsoft.Extensions.DependencyInjection.ServiceLookup.ServiceProviderEngineScope.GetService(Type serviceType)
at Microsoft.Extensions.DependencyInjection.ServiceProviderServiceExtensions.GetRequiredService(IServiceProvider provider, Type serviceType)
at Microsoft.Extensions.DependencyInjection.ServiceProviderServiceExtensions.GetRequiredService[T](IServiceProvider provider)
at Microsoft.AspNetCore.Authentication.AuthenticationMiddleware.Invoke(HttpContext context)
at Microsoft.AspNetCore.Diagnostics.DeveloperExceptionPageMiddlewareImpl.Invoke(HttpContext context)

Reproduction Steps

This code as minimal api lambda, created with the serverless.MinimalApi dotnet template:

using Microsoft.AspNetCore.Authentication.JwtBearer;
using Microsoft.IdentityModel.Tokens;

var builder = WebApplication.CreateBuilder(args);

var key = System.Text.Encoding.ASCII.GetBytes("YourSecretKeyHere");

builder.Services.AddAuthentication(x =>
{
    x.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
    x.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
})
.AddJwtBearer(x =>
{
    x.RequireHttpsMetadata = false;
    x.SaveToken = true;
    x.TokenValidationParameters = new TokenValidationParameters
    {
        ValidateIssuerSigningKey = true,
        IssuerSigningKey = new SymmetricSecurityKey(key),
        ValidateIssuer = false,
        ValidateAudience = false
    };
});

builder.Services.AddAWSLambdaHosting(LambdaEventSource.HttpApi);

builder.Services.AddAWSLambdaBeforeSnapshotRequest(new HttpRequestMessage(HttpMethod.Get, "/"));

var app = builder.Build();

app.UseAuthentication();

app.MapGet("/", () => "Welcome to running ASP.NET Core Minimal API on AWS Lambda");

app.Run();

Needs these packages:

<PackageReference Include="Amazon.Lambda.AspNetCoreServer.Hosting" Version="1.9.0" />
<PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="8.0.22" />

Possible Solution

No response

Additional Information/Context

No response

AWS .NET SDK and/or Package version used

Amazon.Lambda.AspNetCoreServer.Hosting 1.9.0

Targeted .NET Platform

.NET 8

Operating System and version

AmazonLinux

[McDoit]

Added that it only occurs with aspnet_environment set to Development

[dscpinheiro]

If possible, could you share the event your Lambda is receiving (after removing any sensitive data)? I tried with one of the built examples in the console [1], and the reproduction code you shared worked [2] (with SnapStart enabled and ASPNETCORE_ENVIRONMENT=Development). So I want to double check we're not missing anything.

[1] Request:

{
  "version": "2.0",
  "routeKey": "$default",
  "rawPath": "/",
  "cookies": [
    "cookie1",
    "cookie2"
  ],
  "headers": {
    "Header1": "value1",
    "Header2": "value1,value2"
  },
  "requestContext": {
    "accountId": "123456789012",
    "apiId": "api-id",
    "authorizer": {
      "jwt": {
        "claims": {
          "claim1": "value1",
          "claim2": "value2"
        },
        "scopes": [
          "scope1",
          "scope2"
        ]
      }
    },
    "domainName": "id.execute-api.us-east-1.amazonaws.com",
    "domainPrefix": "id",
    "http": {
      "method": "GET",
      "path": "/",
      "protocol": "HTTP/1.1",
      "sourceIp": "192.168.0.1/32",
      "userAgent": "agent"
    },
    "requestId": "id",
    "routeKey": "$default",
    "stage": "$default",
    "time": "12/Mar/2020:19:03:58 +0000",
    "timeEpoch": 1583348638390
  },
  "pathParameters": {
    "parameter1": "value1"
  },
  "isBase64Encoded": true,
  "stageVariables": {
    "stageVariable1": "value1",
    "stageVariable2": "value2"
  }
}

[2] Response and logs:

{
  "statusCode": 200,
  "headers": {
    "Content-Type": "text/plain; charset=utf-8"
  },
  "body": "Welcome to running ASP.NET Core Minimal API on AWS Lambda",
  "isBase64Encoded": false
}

RESTORE_START Runtime Version: dotnet:8.v71	Runtime Version ARN: arn:aws:lambda:us-east-1::runtime:eb460407d38dfe2ec5e81b083a5ed55d92546b9b21bc76680359038583d98730
RESTORE_REPORT Restore Duration: 678.02 ms
START RequestId: cbe3e594-d9d0-4f04-bf00-1c22a7cfe5c6 Version: 2
END RequestId: cbe3e594-d9d0-4f04-bf00-1c22a7cfe5c6
REPORT RequestId: cbe3e594-d9d0-4f04-bf00-1c22a7cfe5c6	Duration: 457.68 ms	Billed Duration: 558 ms	Memory Size: 512 MB	Max Memory Used: 97 MB	Restore Duration: 678.02 ms	Billed Restore Duration: 100 ms