¿Cómo verifico mi token OIDC?

How do I check my OIDC token?

There are basically three steps to it:

1. Check that the ID token’s crypto algorithm matches the one which the client has registered with the OpenID provider;
2. Validate the ID token signature or HMAC;
3. Validate the ID token claims: issuer — does the token originate from the expected IdP?

Here is how to retrieve your last 3 purchased KPLC tokens

1. On your mobile phone, dial *977#
2. Go to “Prepaid Services”
3. And select “Latest Token”
4. Enter your Prepaid meter account number.
5. Then Press “Send”

An Authorization Server issues tokens to client applications on behalf of a Resource Owner for use in authenticating subsequent API calls to the Resource Server. The Resource Server hosts the protected resources, and can accept or respond to protected resource requests using access tokens.

IdentityServer3. Access token validation endpoint. The access token validation endpoint can be used to validate reference tokens. It can be also used to validate self-contained JWTs if the consumer does not have support for appropriate JWT or cryptographic libraries. You can either GET or POST to the validation endpoint.

Crazy, I know. The basic premise is that we’re doing OAuth for our mobile app; which the server endpoints need to validate the token. The server is not the authenticating server. We’ll need to share a cert and validate the token. The original idea was to write our own token validation library. We started down this route.

(I know that mainly IdSrv is used for authorization, but it provide authentication as well.) This way, third party application call a WCF method (for some business) must pass in an access token and if the access token is invalid/expired, third party application will get an exception.

Every time the client refreshes a token it needs to make an (authenticated) back-channel call to IdentityServer. This allows checking if the refresh token is still valid, or has been revoked in the meantime. From http://docs.identityserver.io/en/latest/topics/grant_types.html#refresh-tokens