Hi,

when validating the signature of a token from e.g. Azure AD the header can contain a nonce value. If that is present the current validation of the token fails. After doing some research i found out that the nonce value has to be removed from the token header and replaced with a SHA256 hashed equivalent.

I modified the JWT_Core extension with the following code

This code snippet then results in a successful validation of the signature.

Would be awesome if you could add it to the component.

Best

Stefan