blazor-jwt_generator-dotnet6

Fill in the properties below, and hit the "Generate JWT" button below.

Version (of the Azure AD endpoint)

Issuer (the identity provider issuing the token)

Audience (who the token is intended for)

sub (pairwise unique id for entity + appid)

Issued At (current time in UTC)

Not before (current time in UTC)

Expiration (by default 60 minutes after issuance)

name (of entity token is issued to)

preferred_username (UPN or email address)

oid (the unique id of the entity object in Azure AD)

tid (Azure AD tenant id)

nonce (parameter in request to the IdP for response validation)

aio (internal claim used by Azure AD - not a validation parameter)

A JSON representation of what the deserialized token will look like (not the actual token since this text is pre-generated).
The token will be signed with a certificate as defined in appsettings.json (kid == thumbprint).


        {
        "alg": "RS256",
        "kid": "placeholder",
        "typ": "JWT"
        }.{
        "ver": 2.0",
        "iss": "https://login.microsoftonline.com/common/v2.0",
        "sub": "AAAAAAAAAAAAAAAAAAAAAIkzqFVrSaSaFHy782bbtaQ",
        "aud": "6cb04018-a3f5-46a7-b995-940c78f5aef3"
        "exp": 1769404931,
        "iat": 1769401331,
        "nbf": 1769401331,
        "name": "John Doe",
        "preferred_username": "john.doe@contoso.com",
        "oid": "00000000-0000-0000-66f3-3332eca7ea81",
        "tid": "9122040d-6c67-4c5b-b112-36a304b66dad",
        "nonce": "12345",
        "aio": "Df2UVXL1ix!lMCWMSOJBcFatzcGfvFGhjKv8q5g0x732dR5MB5BisvGQO7YWByjd8iQDLq!eGbIDakyp5mnOrcdqHeYSnltepQmRp6AIZ8jY"
        }

Generated token