Comments (8)
What please is the value of AUD in the token claims?
from oauth2-azure.
ehm. AUD token? where ist that set?
from oauth2-azure.
Ah. I assumed that your "I've checked the token and it is the value created" meant that you had decoded the access token.
You can easily check the client id. But to check the audience:
- go to https://jwt.io/ , paste your token in there,. and look for the AUD (audience) claim.
If the result is garbage,; de-Base64 the token first using https://www.base64decode.org/
from oauth2-azure.
I see thanks, I could see the content. But how is the validateAccessToken supposed to work? I assumed in an API call I can do a quick test to check it the the session is (still) valid.
from oauth2-azure.
Since the error message is saying that either or both of the client ID (which you input) and AUD (which you didn't) are bad, could you please reply with the AUD value - it is not sensitive.
If the token had timed out - they have a very short life of perhaps an hour, or the key signature was bad - I would hope that the error message would say so.
from oauth2-azure.
If I decode the result of getToken and base64_decode it I get something proper but also some garbage at the end
�$@RD_�BZC^�Pv~9P`�8BZq�yt]�^�D)>ϧEꮉ�T<`,_#ⴅ3�uoR,?or�wIjB@d�X� )RtPtI_C=/Ae-j��$t�m.�\.7�j`D:nsʽ�p��垝�M[�&d%�LbȈ
> ���w�p!y�J�S�KPs\7j$�
And json_encode cannot use it.
but the AUD is "https://graph.windows.net/",
from oauth2-azure.
I cannot tell what the garbage is, but if you are using Graph as the resource provider, the AUD should be https://graph.microsoft.com.
If instead you are using a non-Microsoft package such as PHPMailer to send SMTP mail, the AUD must be https://outlook.office.com/ or authentication will fail; this AUD is forced using a Scope operand
from oauth2-azure.
Thanks. but what I see we don't need the results from getToken, only the getResourceOwner data which we will store in a PHP session variable.
from oauth2-azure.
Related Issues (20)
- B2C - Issue when Getting JWT Verification Keys HOT 1
- Class "TheNetworg\OAuth2\Provider\Azure" not found HOT 1
- The Code_Verifier does not match the code_challenge supplied in the authorization request HOT 3
- Azure Graph is being deprecated in June 2023. Please use Microsoft Graph. HOT 3
- Client_credentials grant
- Firebase PHP-JWT key/algorithm type confusion HOT 1
- Question: what needs to be reachable through firewall?
- Not possible to set default algorithm HOT 2
- Uncaught Error: Firebase\JWT\JWT::decode(): Argument #3 ($headers) cannot be passed by reference HOT 16
- README sample incomplete
- openssl_sign(): Supplied key param cannot be coerced into a private key
- return in sample code
- Sample code loops HOT 4
- Azure AD B2C issue
- Fatal error in getDefaultScopes()
- Micorsoft Entra ID and msal-browser/2.37.1 error validation access token HOT 2
- Outdated CHANGELOG.md HOT 2
- Microsoft Graph suddenly not returning user profile attributes HOT 2
- V2 validateTokenClaims and AUD Prefix HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from oauth2-azure.