JWT and X509 with decode JSON Web Token assertion validation error

Products

• CA API Gateway

Issue/Introduction

I am trying to validate an access token from the Azure AD identity provider with x5t claim.
I can retrieve the x5t and x5c fields on the jwks .
But I can’t validate the JWT signature.
I tried many combinations without success.
I always have the same error :

Error decoding: Signature not verified

Environment

11.0

Resolution

The validation was well done with the policy
However, the elements used to create the token can only be validated by Microsoft-specific APIs (API Graph) only.
It is necessary that the tokens are of type applicative or user so that they can be validated with public keys otherwise this is impossible and this is the reason why it was impossible to validate the JWT which was used over here.