This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 66%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAM%3C/text%3E%3C/svg%3E)
I need to validate Azure JWT that is sent to my server. As Azure JWTs are signed with RS256 algorithm I need to obtain a public key in order to be able to verify a token. I searched over the Internet and found the link to retrieve them: https://login.microsoftonline.com/common/discovery/v2.0/keys . But the problem is that the JSON that is returned by the MS server contains keys in a form that I don`t quite understand:
What value should I take from here to perform a JWT validation? What value from here is the RSA public key? Thank you
@Alexey Mykhailov
I wanted to check in and see if you had any other questions or if you were able to resolve this issue?
If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.
If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.
Hi @Alexey Mykhailov , did you need any more help with this question? If not could you please mark "Accept Answer" on the appropriate answer so other users can reference it?
Thank you,
James
Hi @Alexey Mykhailov , the x5c field contains the Base64-encoded X.509 certificate chain, which includes the public key used to sign the JWT. You can decode the certificate chain and extract the public key to verify the JWT signature. Please let me know if you have any questions and I can help you further.
If this answer helps you please mark "Accept Answer" so other users can reference it.
Thank you,
James