Authentification with Microsoft Entra Id
-
I've just tried setting up the OpenID authentification in jsreport with Microsoft Entra Id.
The problem is that Microsoft Entra Id has no introspect endpoint to verify the token. (See for example the discussion here)
I'm still able to log in jsreport studio, but the api requests seem to require the introspect endpoint. Is there a way to use the OpenID authentification in the jsreport api without the introspect endpoint?
-
hi!
yes, the introspect endpoint is a requirement when using HTTP requests to the jsreport HTTP API. right now there is no other way to authenticate the token against the authorization server.
i am opening a new issue to check what MS is recommending in this case (validate with the token signature and issuer validation in the OpenID discovery document). you can subscribe in the issue for updates about the feature, however we don't have am exact time when we will check this.
