PHPackages                             elshaden/azure-b2c-token-validator - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. elshaden/azure-b2c-token-validator

ActiveProject[Authentication & Authorization](/categories/authentication)

elshaden/azure-b2c-token-validator
==================================

Using Laravel Lumen to provide an API to Validate Azure B2C Token..

00PHP

Since Jun 22Pushed 4y ago1 watchersCompare

[ Source](https://github.com/Elshaden/azure-b2c-token-validator)[ Packagist](https://packagist.org/packages/elshaden/azure-b2c-token-validator)[ RSS](/packages/elshaden-azure-b2c-token-validator/feed)WikiDiscussions master Synced today

READMEChangelogDependenciesVersions (1)Used By (0)

Azure B2C AD Token Validator
============================

[](#azure-b2c-ad-token-validator)

Using Laravel Lumen to provide an API to Validate Azure B2C Token.

This app will validate the Azure User Token , A JWT contains three segments, which are separated by the . character. The first segment is known as the header, the second as the body, and the third as the signature. The signature segment can be used to validate the authenticity of the token so that it can be trusted by your app.

Tokens issued by Azure AD are signed using industry standard asymmetric encryption algorithms, such as RS256. The header of the JWT contains information about the key and encryption method used to sign the token:

### This app will validate :

[](#this-app-will-validate-)

> 1 The claim itself. to ensure that the claim is authenticated and matches your Azure B2C AD configuratiion

> 2 The Token JWT Signature as All Azure B2C AD tokens are signed, you need to authenticate the signiture to ensure the origin of the toke is Microsoft Azure AD.

Usage
-----

[](#usage)

#### you need to send by POST:

[](#you-need-to-send-by-post)

```
url = the location of your applicatio ninstallation
method = POST

"headers": {
"Accept": "application/json",
"Content-Type": "application/x-www-form-urlencoded"

        },

```

#### Parameters:

[](#parameters)

```
    "policy_name": "Your Policy Name that You Set Up In Azure B2C AD",
    "client_id": "Your Client Id",
    "tenant": "The Tenant Name",
    "token":  "The Token You want to Validate"

```

### Response

[](#response)

#### Success Http status Code = 200

[](#success---http-status--code--200)

```
{
"token": "valid"
}

```

#### Failed Http status Code = 400

[](#failed-http-status-code--400)

```
{
"token": "not_valid"
}

```

Contributing
------------

[](#contributing)

Thank you for considering contributing !

Security Vulnerabilities
------------------------

[](#security-vulnerabilities)

If you discover a security vulnerability within this application , Report in the issues section.

License
-------

[](#license)

open-sourced software licensed under the [MIT license](https://opensource.org/licenses/MIT).

###  Health Score

15

—

LowBetter than 3% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity0

Limited adoption so far

Community7

Small or concentrated contributor base

Maturity29

Early-stage or recently created project

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

### Community

Maintainers

![](https://www.gravatar.com/avatar/b2b7d966d6b72d533ef1afdb7b498c9bf306fc480fb6563bcd8cdf47c21b1a27?d=identicon)[Elshaden](/maintainers/Elshaden)

---

Top Contributors

[![Elshaden](https://avatars.githubusercontent.com/u/33955172?v=4)](https://github.com/Elshaden "Elshaden (7 commits)")

### Embed Badge

![Health badge](/badges/elshaden-azure-b2c-token-validator/health.svg)

```
[![Health](https://phpackages.com/badges/elshaden-azure-b2c-token-validator/health.svg)](https://phpackages.com/packages/elshaden-azure-b2c-token-validator)
```

###  Alternatives

[namshi/jose

JSON Object Signing and Encryption library for PHP.

1.8k99.6M101](/packages/namshi-jose)[league/oauth1-client

OAuth 1.0 Client Library

99698.8M106](/packages/league-oauth1-client)[bezhansalleh/filament-shield

Filament support for `spatie/laravel-permission`.

2.8k2.9M88](/packages/bezhansalleh-filament-shield)[gesdinet/jwt-refresh-token-bundle

Implements a refresh token system over Json Web Tokens in Symfony

70516.4M35](/packages/gesdinet-jwt-refresh-token-bundle)[league/oauth2-google

Google OAuth 2.0 Client Provider for The PHP League OAuth2-Client

41721.2M119](/packages/league-oauth2-google)[illuminate/auth

The Illuminate Auth package.

9327.3M1.0k](/packages/illuminate-auth)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)