microsoft / microsoft/azure-devops-auth-samples
.well-known/openid-configuration for system_accesstoken
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 277
- Forks
- 307
- Avg merge
- 3d 18h
- Merged PRs (30d)
- 2
Description
Is there any documentation on how agent variable $(system.accessToken) value can be validated in custom API? the JWT contains x5t header however with no location of issuer signing keys, it cant be validated.
The token contains values like this but where can we get issuer signing keys in this case? the issuer is app.vstoken.visualstudio.com
Does anyone know what is endpoint for openid configuration for this endpoint?
should have something like /.well-known/openid-configuration
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue names no repository file, test, or entry point. Start by reviewing the system.accessToken claims and app.vstoken.visualstudio.com issuer details, then document the OpenID configuration or signing-key endpoint needed to validate the token, with a clear answer for custom API callers.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure
- Domain
- api, authentication
- Issue type
- Documentation
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100