Improved the security posture of the OIDC snippets

Azure / api-management-policy-snippets

Re-usable examples of Azure API Management policies

MIT License

326 stars 147 forks source link

Open graemefoster opened 4 months ago

graemefoster commented 4 months ago

Added additional encryption on the refresh-tokens - in some scenarios they can be used without a secret. Added a jwt-validation fragment