[Bug] WWW-Authenticate: Bearer error="invalid_token", error_description="The signature is invalid"

Which version of Microsoft Identity Web are you using? 1.8.2

Where is the issue?

• Web API
  • Protected web APIs (validating tokens)

Is this a new or an existing app? c. This is a new app or an experiment.

Repro My reference is the following sample application provided by Microsoft. To generate the token. Then pass the token as a ‘Bearer’

microsoft-authentication-library-for-js\samples\msal-react-samples\typescript-sample

[(https://github.com/AzureAD/microsoft-authentication-library-for-js/tree/dev/samples/msal-react-samples/typescript-sample)]

In my WebAPI I have registered the following middleware with the following configuration fields.

services.AddMicrosoftIdentityWebApiAuthentication(Configuration);

"AzureAd": { "Instance": "https://login.microsoftonline.com/", "ClientId": "client_id_as_it_appear_in_azure_portal", "TenantId": "tenant_id_as_it_appear_in_azure_portal", "AllowWebApiToBeAuthorizedByACL": true }

Expected behavior Expecting the validate the token and allow users to consume procted resources

Actual behavior Following error with 401 https status

WWW-Authenticate: Bearer error="invalid_token", error_description="The signature is invalid"

Possible solution

Additional context / logs / screenshots

[senal]

I was able to fix my issue with by following the above tutorial and the provided technical guidance.

[senal]

Was able to get it working.

Thanks @jmprieur for your advices right directions. @derisen , big thanks to your advices and support.