How are Microsoft account JWT authentication tokens signed?
问题 In my web application I need to validate the JWT authentication tokens which I get from Live SDK 5.6. A while ago the signature of those tokens was a HMACSHA256 hash of base64 encoded header+payload using signing key which was the app secret (from account.live.com/developers/applications) + "JWTSig". It seems that is not the case now. Does anyone know how are those tokens signed now? Sorry for my english. 回答1: The best way to do this is to get the JWT token returned from Azure Mobile Services