azure-active-directory

Validating a Microsoft Graph JWT Token

被刻印的时光 ゝ 提交于 2021-01-01 13:30:25
问题 I'm by no means an expert on MSAL/JWT/Graph authentication, but I'm hoping someone can explain this issue more clearly to me, or help me understand if there's a workaround or better approach. Essentially, there are certain scenarios where I might end up with a Microsoft Graph JWT token. Two examples I can think of easily are using the Microsoft Graph Toolkit or using Tabs SSO in Microsoft Teams. In both cases, I can get relevant identity information for the user from the JWT token I would

Validating a Microsoft Graph JWT Token

爷,独闯天下 提交于 2021-01-01 13:29:54
问题 I'm by no means an expert on MSAL/JWT/Graph authentication, but I'm hoping someone can explain this issue more clearly to me, or help me understand if there's a workaround or better approach. Essentially, there are certain scenarios where I might end up with a Microsoft Graph JWT token. Two examples I can think of easily are using the Microsoft Graph Toolkit or using Tabs SSO in Microsoft Teams. In both cases, I can get relevant identity information for the user from the JWT token I would

Teams Task Module SSO issue

北慕城南 提交于 2021-01-01 08:14:38
问题 Teams SSO is working fine in Teams Tab and task module of Messaging extension but getting below error in Teams Bot task module while fetching client token ExtensionTabService: getAuthTokenForApp: Failed with error - Definition not found Using below code to open task module in teams bot with help of hero card - https://teams.microsoft.com/l/task/${appId}?url=${modalUrl}&height=${height}&width=${width}&title=${title}` The same code is also working in the Teams Bot task module in Android Mobile

Is it possible authenticate both Connect-AzAccount and Connect-AzureAD using MFA with a single user login prompt?

时光总嘲笑我的痴心妄想 提交于 2020-12-31 06:30:30
问题 I set up a visual studio project template that runs setup scripts to automatically register an application and create application insights for the app. The problem is the app registration uses the AzureAD module while the application insights (and the resource group creation if needed) use the Az modules, so I end up needing to do Connect-AzAccount Connect-AzureAD Which prompts the user for their login twice. Is there a way to use the auth from one to authenticate the other? I've seen similar

Is it possible authenticate both Connect-AzAccount and Connect-AzureAD using MFA with a single user login prompt?

ぐ巨炮叔叔 提交于 2020-12-31 06:30:23
问题 I set up a visual studio project template that runs setup scripts to automatically register an application and create application insights for the app. The problem is the app registration uses the AzureAD module while the application insights (and the resource group creation if needed) use the Az modules, so I end up needing to do Connect-AzAccount Connect-AzureAD Which prompts the user for their login twice. Is there a way to use the auth from one to authenticate the other? I've seen similar

Bearer error=“invalid_token”, error_description=“The signature is invalid”

徘徊边缘 提交于 2020-12-30 05:55:10
问题 I have a angular application that request a token from azure. The login went well and I get a token. This token is now send from the angular app to a net core webapi application. Net core should verify this token but failed. I think the webapi should also contact azure to validate the token because it has no knowledge of the private and public key that is needed to verify the token. At the moment it is not clear why it is failing. Both angular app and the webapi are running local on my

Automated endpoint testing protected by Azure AD B2C

旧时模样 提交于 2020-12-30 02:30:47
问题 I have a WebAPI application which authenticates users with their Azure B2C token they have acquired from signing in with their credentials. I need to write some tests against my WebAPI now but I'm not sure how I can automate acquiring a token given that I need to sign in on https://login.microsoftonline.com ... Short of using selenium or something to sign in - is there another alternative for acquiring a token to use? 回答1: I assume that you want to get token with non-interactive. I think you

authentication to azure ad protected app using id_token

倖福魔咒の 提交于 2020-12-27 06:10:57
问题 I have two app services both protected using azure ad authentication configured from azure portal. The front end app service is written angular. and the authentication method i follow is as follows. On load of angular app . send get request to .auth/me which returns me id_token which in my understanding is my auth token. I store this token and then in turn forward this token in header as Authorization: Bearer *** to my second app service api's However i am observing , that maybe second app

Bearer error - invalid_token - The signature key was not found

*爱你&永不变心* 提交于 2020-12-25 09:42:19
问题 I have an Angular 7 application interfacing with a .Net Core 2.2 API back-end. This is interfacing with Azure Active Directory. On the Angular 7 side, it is authenticating properly with AAD and I am getting a valid JWT back as verified on jwt.io. On the .Net Core API side I created a simple test API that has [Authorize] on it. When I call this method from Angular, after adding the Bearer token, I am getting (as seen in Chrome Debug Tools, Network tab, "Headers"): WWW-Authenticate: Bearer

Bearer error - invalid_token - The signature key was not found

拈花ヽ惹草 提交于 2020-12-25 09:41:40
问题 I have an Angular 7 application interfacing with a .Net Core 2.2 API back-end. This is interfacing with Azure Active Directory. On the Angular 7 side, it is authenticating properly with AAD and I am getting a valid JWT back as verified on jwt.io. On the .Net Core API side I created a simple test API that has [Authorize] on it. When I call this method from Angular, after adding the Bearer token, I am getting (as seen in Chrome Debug Tools, Network tab, "Headers"): WWW-Authenticate: Bearer