Azure token validation

[pelord]

Did someone sucessfully achieve a access token validation on Azure/Microsoft with this mod?

I'm partially aware of some restrictions (#71) but i'm currently losing hope.

Here my conf.

                AuthType oauth2
                LogLevel debug oauth2:trace5  
                OAuth2TokenVerify jwks_uri https://login.microsoftonline.com/{TENANT}/discovery/v2.0/keys?appid={APPID]
                Require valid-user

At this stage, i get this error

_cjose_jws_verify_sig_rs error:04091068:rsa routines:int_rsa_verify:bad signature

[pelord]

This is insightful

https://stackoverflow.com/a/76280037/4254061

[pelord]

Hope is back!

My issue was that my requested scope (to Azure AD) was not the default one.

Once i've setted the correct scope on my token request, the mod verified the call.