Azure / Azure/static-web-apps

How to verify tokens from SWA to App function

Open
#1,433 2 comments 2 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
346
Forks
67
PR merge metrics
No merged PRs in 30d

Description

Hello

I recently started working on SWA with AD B2C.
There is also app function build in SWA and successfully deployed them and checked API works .

Now, I'm wondering if I can validate the tokens sent from SWA to App function API ?
I found `authentication header` and `x-ms-auth-token header` which are JWT.
Successfully they are decoded and included some userInfo and now I want to validate those tokens with `jsonwebtoken` or some other library.

However, I couldn't find the jwks_url which should have public keys for those tokens.

Is it even possible?
It would be really appreciated if you can help me.

Thank you so much.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.