3 ms·
Microsoft should never have offered an API to verify an auth token is syntactically valid without checking who it is.
by iudqnolq 4y ago
Microsoft should never have offered an API to verify an auth token is syntactically valid without checking who it is.
- tgv 4y agoThat's not the problem. They do check identity. The problem i the application that accepts Azure's verification as authentication and authorization.
- deleted 4y ago[deleted]