search

AzureAD / microsoft-authentication-library-for-python

Microsoft Authentication Library (MSAL) for Python makes it easy to authenticate to Microsoft Entra ID. General docs are available here https://learn.microsoft.com/entra/msal/python/ Stable APIs are documented here https://msal-python.readthedocs.io. Questions can be asked on www.stackoverflow.com with tag "msal" + "python".
https://stackoverflow.com/questions/tagged/azure-ad-msal+python
Other
799 stars 200 forks source link

Microsoft Recommendations on best practices for validating JWT. #491

Open Shivam60 opened 2 years ago

Shivam60 commented 2 years ago

What am I trying to do?

  1. I have a FAST-API webapp hosted on azure app service. I am trying to secure its endpoints via oAuth2.
  2. I am using AAD Client Credentials flow.

So far I have been able to get tokens, verify and decode it using the steps mentioned here and secure my endpoints. However it feels that a lot of code that I have written as part of JWT verification is basically re inventing the wheel.

  1. Is this the recommended approach/best practice ?
  2. Does everyone have to write the code to verify JWT tokens and essentially re invent the wheel ?