This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 56.00000000000001%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EST%3C/text%3E%3C/svg%3E)
I want to validate a token that is generated from Azure and pass it to my application, and then I need to validate that token with Node JS. Now, when I am validating an Azure token, it gives an invalid signature every time. When I decode the token, I get to know it is the RS256 algorithm, so what is the issue?
@Sakshi Tiwari Maybe this other post can help you: [https://learn.microsoft.com/en-us/answers/questions/1276299/i-cant-verify-azure-ad-token-in-node-js-web-api-(n](https://learn.microsoft.com/en-us/answers/questions/1276299/i-cant-verify-azure-ad-token-in-node-js-web-api-(n)
Hello I tried this approach but it gives unauthorized in output. Can you suggest some specific configuration for azure enterprise application?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(73.60000000000001, 70%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECD%3C/text%3E%3C/svg%3E)
It's seems a login/authentication problem. You need check user permissions.
@Carlos dos Santos i am using this approach in node js everything seems right but code gives invalid signature everytime. Can you please look into this?
const express = require('express');
const jwt = require('jsonwebtoken');
const jwksClient = require('jwks-rsa');
const cors = require('cors');
const app = express();
const port = 3000;
// Azure AD Configuration
const azureConfig = {
clientId: '',
tenantId: '',
clientSecret: '',
// jwksUri: `https://login.microsoftonline.com/${azureConfig.tenantId}/discovery/v2.0/keys`,
};
// Enable CORS for a specific origin
const corsOptions = {
origin: 'http://localhost:4200',
methods: 'GET,HEAD,PUT,PATCH,POST,DELETE',
credentials: true,
};
app.use(cors(corsOptions));
// JWT Authentication Middleware
const authenticateJwt = (req, res, next) => {
const token = req.headers.authorization;
console.log('Authentication', token);
if (!token) {
return res.status(401).json({ message: 'Unauthorized: No token provided' });
}
jwt.verify(token.replace('Bearer ', ''), getKey, { algorithms: ['RS256'] }, (err, decoded) => {
if (err) {
console.error('JWT Verification Error:', err);
return res.status(401).json({ message: 'Unauthorized: Invalid token' });
}
req.user = decoded;
next();
});
};
// Function to get the public key for token verification
const getKey = (header, callback) => {
const jwksUri = `https://login.microsoftonline.com/${azureConfig.tenantId}/discovery/v2.0/keys`;
const client = jwksClient({
jwksUri: jwksUri,
});
console.log('client', client);
client.getSigningKey(header.kid, (err, key) => {
if (err) {
console.error('JWKS Error:', err);
return callback(err);
}
const signingKey = key.publicKey || key.rsaPublicKey;
callback(null, signingKey);
});
};
// Routes
app.get('/', (req, res) => {
res.send('Hello World!');
});
app.get('/protected-route', authenticateJwt, (req, res) => {
// This route is protected, and the user must have a valid JWT to access it
res.json({ message: 'You have access to the protected route!' });
});
// Start the server
app.listen(port, () => {
console.log(`Server is running on http://localhost:${port}`);
});
Are you trying to use SSO with Azure Entra (AAD) ?
Yes, I am working with Azure AD as part of implementing or managing Single Sign-On (SSO). I am handling the validation of JWT (JSON Web Tokens) issued by Azure AD. Basically I am validating azure token which is generated by azure ad from url: https://applicationname.b2clogin.com/applicationname.onmicrosoft.com/<policy-name>/oauth2/v2.0/token and i just need to verify it with nodejs.
Ok, you need more steps to do this: https://learn.microsoft.com/en-us/entra/identity-platform/tutorial-v2-nodejs-webapp-msal
We are validating token which is generated with azure ad token and getting that token from req.headers and validating it with node js.
@Sakshi Tiwari If you need only to check token is valid calling some GraphAPI, like this: https://graph.microsoft.com/v1.0/me
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(64, 21%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPK%3C/text%3E%3C/svg%3E)
Hello @Carlos Dos Santos
Is this a reliable approach to call (https://graph.microsoft.com/v1.0/me) this end point for each api call to check token validity?