www-authenticate: Bearer error="invalid_token",error_description="The signature is invalid"

Question

www-authenticate: Bearer error="invalid_token",error_description="The signature is invalid"

Mohamad Usman Sagri 6

Hi,

I am trying to use my ad token at web api and getting following error

www-authenticate: Bearer error="invalid_token",error_description="The signature is invalid"

I have added below configurations to my appsettings.json

"AzureAd": {
"Instance": "https://login.microsoftonline.com/",
"ClientId": "810c70dc-df08-4172-93ac-XXXXXX",
"TenantId": "7d6b867e-d1c6-4378-8c59-XXXXXXX"
}

and below authentication scheme to my program.cs

builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
.AddMicrosoftIdentityWebApi(builder.Configuration.GetSection("AzureAd"));

Kindly guide how to resolve this issue.

Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2022-10-11T06:09:12.72+00:00

Hi @Mohamad Usman Sagri ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,
Shweta

2 answers

Your answer

Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2022-10-11T06:09:12.72+00:00

Hi @Mohamad Usman Sagri ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,
Shweta

Answer 1

Bruce (SqlWork.com) 77,686 Volunteer Moderator

Also for webapi, in azure ad you need to define a scope and api access for azure ad application. The client request for access token should include this scope.

Answer 2

Vinodh247 34,661 MVP Volunteer Moderator

Hi

Thanks for reaching out to Microsoft Q&A.

These are accepted answers for the same error earlier, please check -one of these should work for you.

https://stackoverflow.com/questions/48944697/bearer-error-invalid-token-error-description-the-signature-is-invalid
https://learn.microsoft.com/en-us/answers/questions/762957/www-authenticate-bearer-error34invalid-token34-err.html

Please Upvote and Accept as answer if the reply was helpful, this will be helpful to other community members.

Share via

www-authenticate: Bearer error="invalid_token",error_description="The signature is invalid"

2 answers

Your answer