microsoft-authentication-library-for-python icon indicating copy to clipboard operation
microsoft-authentication-library-for-python copied to clipboard

Published 20 hours ago • verified publisher icon AzureAD

Microsoft Recommendations on best practices for validating JWT.

Open Shivam60 opened this issue 2 years ago • 0 comments

What am I trying to do?

  1. I have a FAST-API webapp hosted on azure app service. I am trying to secure its endpoints via oAuth2.
  2. I am using AAD Client Credentials flow.

So far I have been able to get tokens, verify and decode it using the steps mentioned here and secure my endpoints. However it feels that a lot of code that I have written as part of JWT verification is basically re inventing the wheel.

  1. Is this the recommended approach/best practice ?
  2. Does everyone have to write the code to verify JWT tokens and essentially re invent the wheel ?

Shivam60 avatar Aug 04 '22 11:08 Shivam60