OIDC Token Validation Demo - Azure AD

oidc_azure.go

package main

import (
	"context"
	"fmt"

	"github.com/coreos/go-oidc/v3/oidc"
)

type (
	OIDCConfig struct {
		ClientID  string `json:"clientId" validate:"required"`
		IssuerURL string `json:"issuerURL" validate:"required"`
		JwksURL   string `json:"jwksURL" validate:"required"`
	}
)

var (
	accessToken = ""
)

func main() {

	cfg := &OIDCConfig{
		ClientID:  "",
		IssuerURL: "https://login.microsoftonline.com/<your-id>/v2.0",
		JwksURL:   "https://login.microsoftonline.com/<your-id>/discovery/v2.0/keys",
	}

	keySet := oidc.NewRemoteKeySet(context.Background(), cfg.JwksURL)
	verifier := oidc.NewVerifier(cfg.IssuerURL, keySet, &oidc.Config{
		ClientID:        cfg.ClientID,
		SkipIssuerCheck: true,
	})

	token, err := verifier.Verify(context.Background(), accessToken)
	if err != nil || token == nil {
		fmt.Println(err)
		return
	}

	fmt.Println("VALID TOKEN: ", token)

}