Yesterday I was working on updating code that implements Microsoft Open ID Connect (produces a JWT). Their documentation [1] is exceptional - all the gotchas a

Yesterday I was working on updating code that implements Microsoft Open ID Connect (produces a JWT). Their documentation [1] is exceptional - all the gotchas and reasons for practices are clearly explained and there’s a first class library to handle token validation for you. I even ended up using the same library to validate tokens from Google. Perhaps not all vendors produce equally well written documentation but I think it’s a lot easier to get it right today than it was 5 years ago. 1. https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-protocols-oidc https://docs.microsoft.com/en-us/azure/active-directory/deve...