Easy to use package to validate JWT tokens provided by Azure. You would think this exists somewhere already but I could not find anything in the azure ADAL library.
The challenge was transforming the public JWK to a PEM format PyJWT could use to validate. Thankfully, I eventually found this fantastic post by Roberto Prevato and implemented it in this package.
It's possible I just missed something. So, if a better solution is discovered please let me know and I will blow this away.
Simple usage, provided you already have a jwk
# Given a token as str and JWK as dict
from azure_jwt_validation import validate_jwt
obj = validate_jwt(token, jwk)Or automatically get the keys
# Create a validator capable of refreshing its public keys
from azure_jwt_validation import JWTTokenValidator
validator = JWTTokenValidator(
ad_tenant='yourtenant.onmicrosoft.com',
application_id='yourappguid',
audiences=['probablyyourappguid']
)
# Call these functions to refresh the keys from either the disk
# or from Azure (default)
validator.load_ms_public_keys()
validator.load_open_id_config()
obj = validator.validate_jwt(token)By default calling the load functions will make a request
to retrieve the config and public keys and save both
to json files in the package.
Pass force_refresh=False To prevent the request and
fall back on these files.
- Originally, only wrote the package to handle openid connect. Consider looking at validating other tokens.