alancting / php-microsoft-jwt Goto Github PK

Hi!
I'm a bit confused by Microsoft's offering. I'm using Firebase/JWT right now to attempt to get a token to use with Microsoft Graph API's (I have the secret key working, but am attempting to use certificate based auth instead).

Is this library suitable for that use case instead, or is it for something else?

Currently with the Firebase/JWT, I'm working through errors of it not thinking I have the correct Key being used (different/wrong thumbprint).

Hello,

This version seem to be not updated since 2021. So i suppose we can't upgrade symfony to version 6 with this library ?
Because i can see in composer.json from php-microsoft-jwt this following code:

"require": {
    "php": ">=7.1.3",
    "symfony/cache": "^4.4 || ^5.0"
  }

In the MicrosftConfiguration.php file on line 271 you need the command curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
Or enable passing the parameter to the path where the .pem certificate is installed for validation.

In the same file, lines 241 and 242 are validating whether the fields "userinfo_endpoint" and "device_authorization_endpoint" are available, but my Azure B2C application does not have these fields filled in. The ideal would be to pass the fields to be validated as a parameter, or validate only the essential ones.

The below message occurs when call AzureAdConfiguration

file_get_contents(): SSL operation failed with c
ode 1. OpenSSL Error messages:\nerror:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed

Suggest to add logic by using cURL library for connecting remote site.

Hi,

thanks for this package. However a thing is missing. I am unable to validate multitenant application.
It would be great if we can configure multiple tenant in the configuration to validate issuer.
You can have a look to the followings links :

• https://stackoverflow.com/questions/52347821/azure-ad-multi-tenant-applications-how-to-implement-token-validation

The simplest way should be to let the user to override the _validateIssuer function

Best regards