我们如何在后端验证来自 azure AD 的访问令牌？

Question

I have a accesToken from azure AD. I need to validate them in python. How can I do that?

Answer 1

One of the workaround is to use PyJWT and cryptography dependancies (Because it contains binary dependencies, it must be created and packaged for the target operating system) to support the RS256 algorithm.

pip install pyjwt cryptography requests

• The public key of the key pair used to sign the token is required to validate it.
• We'll also require the App ID you supplied in the Azure portal for further validation.

Then use the App ID to validate the token.

import jwt

app_id = 'd31a4d20-6c4a-1a40-b74d-1a3d461bb3d8'
access_token = 'XXXX'
token_header = jwt.get_unverified_header(access_token)

For more information you can refer

REFERENCES:

1. AAD OAuth2 JWT Token Validation with Python
2. How to verify JWT id_token produced by MS Azure AD?