- NodeJS Runtime
- Verify JWT Token issued by Azure Active Directory B2C
- Automatically use the rotated public key from Azure Public Keys URL
npm install --save azure-jwt-verify
You need to define the following constants based on your Azure Active Directory B2C application configurations
var azureJWT = require('azure-jwt-verify');var jwtToken = "YOUR_JWT_TOKEN_TO_VERIFY"; // You can find this url in Azure Active Directory B2C Section
const config = {
JWK_URI: "",
ISS: "",
AUD: ""
};- JWK_URI and the ISS(Issuer) can be obtained from the metadata endpoint of the policies created in the B2C tenant.
- AUD(Audience) is the Client ID of the application accessing the tenant.
azureJWT.verify(jwtToken, config).then(function(decoded){
// success callback
}, function(error){
// error callback
})Response body:
{
"status": "success",
"message": {
"exp": 1486111778,
"nbf": 1486108178,
"ver": "1.0",
"iss": "https://login.microsoftonline.com/9434db1e-33cd-4607-b350-9d947127a5de/v2.0/",
"sub": "ff8490cb-2bda-4cc8-b801-4a22a8620c59",
"aud": "dfc54797-efe3-4db3-a1e1-422b4ecf27d7",
"nonce": "defaultNonce",
"iat": 1486108178,
"auth_time": 1486108178,
"oid": "ff8490cb-2bda-4cc8-b801-4a22a8620c59",
"name": "jon snow",
"extension_NIC": "933132325V",
"emails": [
"hellodishan@gmail.com"
],
"tfp": "B2C_1_b2c_1_sign_in"
}
}Response body:
{
"status": "error",
"message": {
"name": "TokenExpiredError",
"message": "jwt expired",
"expiredAt": "2017-02-02T12:30:11.000Z"
}
}Response body:
{
"status": "error",
"message": "Error Decoding JWT Token"
}