ASP.NET Core 5调用Auth0创建用户时持续返回400状态码问题

问题背景 #

在ASP.NET Core 5 Web API项目中调用Auth0 Management API创建用户，持续收到400状态码。根据官方文档，该状态码对应以下可能场景：

400 - Invalid request body. The message will vary depending on the cause.
400 - Connection does not support user creation through the API. It must either be a database or passwordless connection.
400 - Cannot set username for connection without requires_username.
400 - Connection does not exist.
400 - Connection is disabled.

已在Auth0控制台创建名为NewDbConn-2024的连接，当前代码使用该连接名而非默认的Username-Password-Authentication。

当前代码实现 #

请求体构造（字符串形式） #

var content = new StringContent("{\"email\":\"sample1234@yahoo.com\",\"phone_number\":\"\",\"user_metadata\":{},\"blocked\":false,\"email_verified\":false,\"phone_verified\":false,\"app_metadata\":{},\"given_name\":\"sample12\",\"family_name\":\"sample12\",\"name\":\"sample12\",\"nickname\":\"sample12\",\"picture\":\"\",\"user_id\":\"\",\"connection\":\"NewDbConn-2024\",\"password\":\"\",\"verify_email\":false,\"username\":\"sample-2024\"}", null, "application/json");

完整接口代码 #

[HttpPost("CreateUserAuth0")]
public async Task<IActionResult> CreateUserAuth0()
{
    // Add authorization access token.
    string accessToken = _auth0Service.GetAccessToken();
    string authorization = $"Bearer {accessToken}";
   
    var client = new HttpClient();
    var request = new HttpRequestMessage(HttpMethod.Post, "https://company-domain.us.auth0.com/api/v2/users");
    
    request.Headers.Add("Accept", "application/json");
    request.Headers.Add("authorization", authorization);

    var content = new StringContent("{\"email\":\"sample1234@yahoo.com\",\"phone_number\":\"\",\"user_metadata\":{},\"blocked\":false,\"email_verified\":false,\"phone_verified\":false,\"app_metadata\":{},\"given_name\":\"sample12\",\"family_name\":\"sample12\",\"name\":\"sample12\",\"nickname\":\"sample12\",\"picture\":\"\",\"user_id\":\"\",\"connection\":\"NewDbConn-2024\",\"password\":\"\",\"verify_email\":false,\"username\":\"sample-2024\"}", null, "application/json");
    request.Content = content;
    
    var response = await client.SendAsync(request);
    response.EnsureSuccessStatusCode();
 
    return Ok(response.Content);
}

疑问与需求 #

1. 不确定请求体或连接配置是否存在问题导致400错误
2. 希望用强类型对象而非字符串构造请求体，示例雏形如下：

return new CreateUserAuth0
{
   Email = user.Email,
   Blocked = false,
   EmailVerified = true,
   PhoneVerified = false,
   GivenName = user.FirstName,
   FamilyName = user.LastName,
   Name = user.FirstName,
   Connection = "NewDbConn-2024",
   Password = "",
   VerifyEmail = false,
   Username = user.Email
};

排查与解决方案 #

一、400错误排查步骤 #

1. 检查连接配置

   • 确认NewDbConn-2024是数据库连接（Database Connection），且已启用API创建用户权限：进入Auth0控制台该连接的设置页面，查看Database Settings下是否开启Allow users to sign up，同时确认连接状态为启用。
   • 若请求传递了username字段，需检查该连接是否开启Requires Username选项：未开启则移除username参数，解决Cannot set username for connection without requires_username错误。
   • 核对连接名称拼写（Auth0连接名称区分大小写）。

2. 检查请求体合法性

   • 数据库连接创建用户时必须提供符合复杂度要求的密码，当前请求体中password为空字符串，这会触发无效请求体错误。
   • 移除不必要的空字段：phone_number、user_id、picture等未使用字段可删除，减少无效数据干扰。
   • 验证JSON格式：手动拼接的字符串易出现格式错误，建议用JSON校验工具确认合法性。

二、强类型对象构造请求体实现 #

1. 定义强类型模型
   根据Auth0 Create User API参数，创建对应C#类：

public class CreateUserAuth0Request
{
    [JsonPropertyName("email")]
    public string Email { get; set; }
    
    [JsonPropertyName("blocked")]
    public bool Blocked { get; set; }
    
    [JsonPropertyName("email_verified")]
    public bool EmailVerified { get; set; }
    
    [JsonPropertyName("phone_verified")]
    public bool PhoneVerified { get; set; }
    
    [JsonPropertyName("given_name")]
    public string GivenName { get; set; }
    
    [JsonPropertyName("family_name")]
    public string FamilyName { get; set; }
    
    [JsonPropertyName("name")]
    public string Name { get; set; }
    
    [JsonPropertyName("connection")]
    public string Connection { get; set; }
    
    [JsonPropertyName("password")]
    public string Password { get; set; }
    
    [JsonPropertyName("verify_email")]
    public bool VerifyEmail { get; set; }
    
    [JsonPropertyName("username")]
    public string Username { get; set; }
    
    [JsonPropertyName("user_metadata")]
    public object UserMetadata { get; set; } = new {};
}

2. 重构接口代码
   使用System.Text.Json序列化强类型对象替代手动拼接字符串：

[HttpPost("CreateUserAuth0")]
public async Task<IActionResult> CreateUserAuth0()
{
    string accessToken = _auth0Service.GetAccessToken();
    string authorization = $"Bearer {accessToken}";
   
    var client = new HttpClient();
    var request = new HttpRequestMessage(HttpMethod.Post, "https://company-domain.us.auth0.com/api/v2/users");
    
    request.Headers.Add("Accept", "application/json");
    request.Headers.Add("authorization", authorization);

    // 构造强类型请求对象
    var userRequest = new CreateUserAuth0Request
    {
        Email = "sample1234@yahoo.com",
        Blocked = false,
        EmailVerified = false,
        PhoneVerified = false,
        GivenName = "sample12",
        FamilyName = "sample12",
        Name = "sample12",
        Connection = "NewDbConn-2024",
        Password = "YourStrongPassword123!", // 替换为符合要求的密码
        VerifyEmail = false,
        Username = "sample-2024"
    };

    // 序列化为JSON内容
    var jsonContent = JsonSerializer.Serialize(userRequest);
    var content = new StringContent(jsonContent, Encoding.UTF8, "application/json");
    request.Content = content;
    
    var response = await client.SendAsync(request);
    
    // 捕获异常并获取Auth0详细错误信息
    try
    {
        response.EnsureSuccessStatusCode();
    }
    catch (HttpRequestException ex)
    {
        var errorContent = await response.Content.ReadAsStringAsync();
        return BadRequest(errorContent);
    }
 
    return Ok(await response.Content.ReadAsStringAsync());
}

三、额外建议 #

• 捕获HttpRequestException时读取响应内容，获取Auth0返回的详细错误信息，这是排查400错误最直接的方式。
• 确保GetAccessToken()获取的Token包含create:users权限，避免因权限不足导致的错误。

内容的提问来源于stack exchange，提问作者user8512043