where can we get Key or Certificate to validate the id_token with jwt.io

Question

User430178104 posted

I'm using Oauth to get the Bearer token (below is the API). It returns token_type, access_token, refresh_token and id_token. I am trying to validate the id_token with Jwt.io. Unfortunitly it is showing Invalid Signature. whereas it is showing header and payload

https://login.microsoftonline.com/{0}/oauth2/token

Could you please let me know where can i get the Key or Certificate to validate the token

Answer 1

User1724605321 posted

Hi pathipati ,

Please refer to document : https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-token-and-claims#validating-tokens

Check the "Validating the signature" section to know how to validate the signature . See the process also in here .

At last you will understand how to validate the jwt token with JWT.IO:

https://nicksnettravels.builttoroam.com/post/2017/01/24/Verifying-Azure-Active-Directory-JWT-Tokens.aspx 

Best Regards, 

Nan Yu