MSAL Android - JWT token failed signature validation on National Cloud

Nick 6 Reputation points
2022-05-25T15:23:54.357+00:00

We are using MSAL Android within a national cloud environment and are seeing the following exception.

Here are our configurations:

Gradle dependencies:

implementation 'com.microsoft.identity.client:msal:3.0.2'
implementation ('com.microsoft.graph:microsoft-graph:5.24.0') {
exclude group: 'javax.activation'
}

msal_config.json:

{
"client_id" : "whatever",
"authorization_user_agent" : "DEFAULT",
"broker_redirect_uri_registered" : false,
"account_mode" : "SINGLE",
"logging": {
"pii_enabled": true,
"log_level": "VERBOSE",
"logcat_enabled": true
},
"redirect_uri" : "msauth://whatever/whatever",
"authorities" : [
{
"type": "AAD",
"audience": {
"type": "AzureADMyOrg",
"tenant_id": "whatever"
},
"authority_url": "https://login.microsoftonline.us/common"
}
]
}

2022-05-23 18:46:26.961 29108-29108/XXX.XXX.XXX
E/AUTH: Unhandled exception authenticating
java.util.concurrent.CompletionException: com.microsoft.identity.client.exception.MsalServiceException: AADSTS900384: JWT token failed signature validation [Reason - Key was found, but use of the key to verify the signature failed., Thumbprint of key used by client: 'XXX', Found key 'Start=12/21/2020 00:00:00, End=12/21/2025 00:00:00'].
Trace ID: e91420cf-16b3-43eb-be9f-b3d53ee03d00
Correlation ID: 5483f85a-ee8e-419d-8104-e3717fe43ee2
Timestamp: 2022-05-24 14:32:29Z

Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.