Azure validation manager prefixes 'issuer' with 'https://sts.windows.net/'

[gabheadz]

AAD issued me a JWT with issuer "https://login.microsoftonline.com/[tenant-id]/v2.0", and validation is failing because validate always expect this issuer 'https://sts.windows.net/[tentant-id]'. Would it be better if one can define whitch issuer to expect in the options parameter of 'verify = function(jwtString, options, callback)'.?

[cwkummer]

This impacted me as well. I had to change the hard coded issuer to "https://login.microsoftonline.com/[tenant-id]/v2.0" as well. Can this be made a configurable option?

[benc-uk]

This has broken this library for me too :(

[MatthewTrout]

For my use case I needed https://login.microsoftonline.com. Rather than use specific urls, I decided a more sensible solution was to make the issuer and openIdConfig urls optional templates. Looks like this library is unmaintained to feel free to use my fork in case this never gets accepted..