API Token validation failure for your API’s
Impacted areas – Authorization
Root Cause - Microsoft deprecated one of the metadata endpoints in Azure AD B2C
Symptoms – APIs responded with 403 or 401 error depending on Token validation library.
Mitigating actions for impacted API’s– Use the below configuration settings for ‘Stardust.Aadb2c.AuthenticationFilter’ and verify version >= 2.5
config name: b2cTenantUrl
“https://logintest.veracity.com/ed815121-cdfa-4097-b524-e2b23cd36eb6/B2C_1A_SignInWithADFSIdp”
In case you are using any other Token validation library use the following metadata endpoint
“https://login.veracity.com/a68572e3-63ce-4bc1-acdc-b64943502e9d/B2C_1A_SignInWithADFSIdp/V2.0/.well-known/openid-configuration”