AuthenticationTokenInvalid

Question

AuthenticationTokenInvalid

qian liu 11

Hello, I am a developer of Kingsoft Office, which is connected to your company's uwp payment. Now, I have encountered a problem and hope to get help! When calling the interface https://purchase.mp.microsoft.com/v6.0/b2b/keys/renew, the following error response body will appear. Currently, about 9000 pieces of such user data are affected
The response body is as follows

{
"code":"Unauthorized",
"data":[

],  
"details":[  

],  
"innererror":{  
    "code":"AuthenticationTokenInvalid",  
    "data":[  

    ],  
    "details":[  

    ],  
    "innererror":{  
        "code":"B2B key",  
        "data":[  

        ],  
        "details":[  

        ],  
        "message":"IDX10501: Signature validation failed. Unable to match key: \nkid: 'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'. \nNumber of keys in TokenValidationParameters: '0'. \nNumber of keys in Configuration: '3'. \nExceptions caught:\n '[PII of type 'System.Text.StringBuilder' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]'. \ntoken: '[PII of type 'System.IdentityModel.Tokens.Jwt.JwtSecurityToken' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]'."  
    },  
    "message":"Authentication token supplied is invalid"  
},  
"message":"The client is not authorized to perform the requested operation.",  
"source":"PurchaseFD"

}

qian liu 11 Reputation points

2022-08-22T12:25:20.733+00:00

The absence of kid happened before December 2021, I don't know why the data before this time cannot refresh the store id
Shweta Mathur 30,456 Reputation points Microsoft Employee Moderator

2022-08-23T10:17:41.26+00:00

Hi @qian liu ,

Thanks for reaching out.

Based on the error message, this usually come due to providing an invalid token.
Did you tried to decode the token using jwt.ms and verify the kid in token to verify against the public key generated by https://login.microsoftonline.com/{tenant_id}/discovery/keys?appid={client_id}

You can also add IdentityModelEventSource.ShowPII = true in your code to get more insights of this error.

Thanks,
Shweta
Shweta Mathur 30,456 Reputation points Microsoft Employee Moderator

2022-09-05T05:57:50.097+00:00

Hi @qian liu ,

Any updates on this?
qian liu 11 Reputation points

2022-09-06T02:59:23.02+00:00

First, the address of https://www.jwt.ms/ can be parsed successfully. Secondly, only a small number of users have data problems. Most users' data can be authenticated successfully, which can basically rule out server-side program problems.