How to use this library, if i do not require nonce in my jwt about react-native-azure-auth

[vmurin]

Hi,

Nonce is a required part of request and response in OpenID Connect. See MS documentation here:

https://docs.microsoft.com/en-us/azure/active-directory/develop/v1-protocols-openid-connect-code#send-the-sign-in-request

We can not remove it as it's a part of standard.

[abdulrahman18]

@vmurin I checked the response access token in jwt. But It shows an invalid signature. Can you help me?

[abdulrahman18]

@SahilRS200 Can you help me for jwt token issue. Are you fixed on this? I think your issue also same like this right?

[vmurin]

Hi Abdulrahman

I have double checked your issue. I think your are using some wrong key/certificate to validate the token.
Take a look on MS documentation here
And then following article describing JWT.io usage.

As I can see from your screenshots you are using v1 of Azure access points. Your key ID (kid) is "HBxl9mAe6gxavCkcoOU2THsDNa0". And then in the screenshot with the keys I see the public key starting with "MIIBIjANBgk..." but the right key with this kid (from x5c prop) here https://login.microsoftonline.com/common/discovery/keys is "MIIDBTCCAe2gAwI..."

1. So try to use the correct public key from the link above
2. Enclose the key in appropriate header/footer like this

-----BEGIN CERTIFICATE-----
MIIDBTCCAe2gAwI.......
-----END CERTIFICATE-----

3. Leave the private key field empty (it is not used for verification)

4. Find a small code example that also worked for me below.

let jwt = require('jsonwebtoken');
let fs = require('fs');

const decodedValidToken = async (accessToken) => {
  const key = await fs.readFile('public.pem'); 
   
  return await jwt.verify(accessToken, key, function(err, decoded) {
        if (err) {
            console.log('ERROR:  ', err);
        }
        return decoded;
    });
  
}

const decodedToken = decodedValidToken('eyJ0eXAiOiJKV1QiLC.....PLACE YOUR DATE HERE or READ it with readFile e.g.')
    .then(decodedToken => console.log(decodedToken));

Good luck
Vladi