Removing misleading IDX10501 logs when using multiple authentication schemes in ASP.NET Core 3.1

    services.AddAuthentication("AzureAD")
        .AddJwtBearer("Auth0", options =>
        {
            options.Audience = "MyApi";
            options.Authority = "https://oliviervaillancourt.auth0.com/";
        })
        .AddJwtBearer("AzureAD", options =>
        {
            options.Audience = "https://localhost:5000/";
            options.Authority = "https://login.microsoftonline.com/common/";
        });

    services.AddAuthorization(options =>
    {
        options.AddPolicy("AnyJwtBearerScheme", policy =>
        {
            policy.AddAuthenticationSchemes("AzureAD", "Auth0")
                .RequireAuthenticatedUser();
        });
    });

public class AzureADJWTAuthenticationHandler : JwtBearerHandler
    {
        public AzureADJWTAuthenticationHandler(IOptionsMonitor<JwtBearerOptions> options, ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock) 
            : base(options, logger, encoder, clock)
        {}

        protected override async Task<AuthenticateResult> HandleAuthenticateAsync()
        {
            var authorityConfig = await this.Options.ConfigurationManager.GetConfigurationAsync(this.Context.RequestAborted);
            var authorityIssuer = authorityConfig.Issuer;

            var jwtToken = this.ReadTokenFromHeader();

            var jwtHandler = new JwtSecurityTokenHandler();
            
            if (jwtHandler.CanReadToken(jwtToken))
            {
                var token = jwtHandler.ReadJwtToken(jwtToken);
                if (string.Equals(token.Issuer, authorityIssuer, StringComparison.OrdinalIgnoreCase))
                {
                    // means the token was issued by this authority, we make sure full validation runs as normal
                    return await base.HandleAuthenticateAsync();
                }
                else
                {
                    // Skip validation since the token as issued by a an issuer that this instance doesn't know about
                    // That has zero of success, so we will not issue a "fail" since it crowds the logs with failures of type IDX10501 
                    // which are not really true and certainly not useful.
                    this.Logger.LogDebug($"Skipping jwt token validation because token issuer was {token.Issuer} but the authority issuer is: {authorityIssuer}");
                    return AuthenticateResult.NoResult();
                }
            }

            return await base.HandleAuthenticateAsync();
        }

        private string ReadTokenFromHeader(){
            string token = null;
            
            string authorization = Request.Headers["Authorization"];

            // If no authorization header found, nothing to process further
            if (string.IsNullOrEmpty(authorization))
            {
                return null;
            }

            if (authorization.StartsWith("Bearer ", StringComparison.OrdinalIgnoreCase))
            {
                token = authorization.Substring("Bearer ".Length).Trim();
            }

            return token;
        }
    }

services.TryAddEnumerable(ServiceDescriptor.Singleton<IPostConfigureOptions<JwtBearerOptions>, JwtBearerPostConfigureOptions>());
services.AddAuthentication("Auth0")
    .AddScheme<JwtBearerOptions, Auth0JWTAuthenticationHandler>("Auth0", options =>
    {
        options.Audience = "MyApi";
        options.Authority = "https://oliviervaillancourt.auth0.com/";
    })
    .AddScheme<JwtBearerOptions, AzureADJWTAuthenticationHandler>("AzureAD", options =>
    {
        options.Audience = "https://localhost:5000/";
        options.Authority = "https://login.microsoftonline.com/common/";
    });

 if (Options.RefreshOnIssuerKeyNotFound && Options.ConfigurationManager != null
    && ex is SecurityTokenSignatureKeyNotFoundException)
{
    Options.ConfigurationManager.RequestRefresh();
}