Skip to content

Instantly share code, notes, and snippets.

@manishtiwari25
Created May 11, 2020 02:31
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save manishtiwari25/923429a113fd19e1261e2eacab2b8d87 to your computer and use it in GitHub Desktop.
Save manishtiwari25/923429a113fd19e1261e2eacab2b8d87 to your computer and use it in GitHub Desktop.
Azure API Management, JWT Validation, Inbound process
<policies>
<inbound>
<base />
<validate-jwt header-name="Authorization" failed-validation-httpcode="401" failed-validation-error-message="Unauthorized. Access token is missing or invalid." require-scheme="Bearer" output-token-variable-name="jwt">
<openid-config url="B2c Run URL" />
<audiences>
<audience>{Application ID}</audience>
</audiences>
<issuers>
<issuer>{Issuer}</issuer>
</issuers>
</validate-jwt>
</inbound>
<backend>
<base />
</backend>
<outbound>
<base />
</outbound>
<on-error>
<base />
</on-error>
</policies>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment