OIDC Plugin not able to validate token with user info flow

Questions
1

I am trying to validate Bearer token with user info flow of OIDC plugin referring User info authentication - Plugin | Kong Docs

I generate the token from azure ad with client_credentials grant type and default scope. The audience of the token is same as client id
When I try to validate the token using OIDC plugin, I get error with message “Invalid Audience” .How can I resolve this error?

2

Hi @gargitalukdar

I was unable to reproduce this failure. A similar setup is working on my end.

Would you be able to share the details? like OIDC configuration. What version of Kong did you try? Not that it matters but I was on latest. There is no reason this flow should not work in any prior versions.

Thanks

3

Hi @gargitalukdar,

Please verify your audience_cliams set to aud in the plugin configuration.

image
image879×168 3.88 KB

Also, verify your token values with the plugin configurations.