Question
Ernst & Young LLP
IN
Last activity: 25 Aug 2020 20:38 EDT
JWT Token not validating and throwing error "Invalid String or URI"
Hi All,
We are in process of validating the JWT Token through pxProcessJWT activity and Token Profile Configuration. The keystore is jwks_uri i.e. https://login.microsoftonline.com/common/discovery/keys
The token was validating properly before the configuration change of Expose An API at Microsoft Azure's end to get an valid resource attribute as api://{Client ID} in the token generation through
https://login.microsoftonline.com/{tenantID}/oauth2/token .
But post the change has been made , the validation of the token has stopped working and throwing the error as "Invalid String or URI"
Pegasystems Inc.
IN
Hi Swetha,
During JWT validation, we check 'iss' and 'aud' claims are valid URI or not. You are getting the above "Invalid String or URI" because it is not following valid URI syntax. Please check https://www.ietf.org/rfc/rfc2396.txt for allowed URI syntaxes.
While implementing this JWT token feature (3 years ago), we did not consider API:// prefixes.
Thanks,
Siva
EY
US
Hi Siva,
Can you please let us know if there is a hotfix or do you have any workaround to validate tokens with "aud" as "api://....".
Thanks
Raja Mohammed