How to validate the user identity token using SKY API OpenIDConnect

Nate Zapotocky

I am trying to figure out how to validate a UIT after calling getUserIdentityToken() using the SKY API OpenIDConnect described here:
https://developer.blackbaud.com/skyapi/docs/addins/concepts/addin-sso#validating-the-user-identity-token


I assume this is the URL I use to validate: https://oauth2.sky.blackbaud.com/authorization

But, what do I pass it and how do I call it?


On the tutorial page I found, https://developer.blackbaud.com/skyapi/docs/authorization/auth-code-flow/tutorial, it looks like it shows and example where it passes that application id and environment id - but not a user id. so...I'm confused as to how to validate a UIT using SKY API OpenIDConnect.


Any advice?

 

Daniel Leonard

If you are using .NET, you should be able to use the Blackbaud library for validating/parsing the token.
https://www.nuget.org/packages/Blackbaud.Addin.TokenAuthentication


If you are not using .NET, you may be able to use similar logic to what is happening here to validate/parse the token: https://github.com/blackbaud/addin-tokenauthentication/blob/master/Blackbaud.Addin.TokenAuthentication/UserIdentityToken.cs#L124-L153