validate firebase ID token through the use of jwt-verify

[fanxu]

Hi community,

I am working on integrate firebase cloud functions with apigee, there are one challenge I have is how to validate firebase ID token through the use of jwt-verify.

The ID token is generated from the frontend firebase SDK,  and below is my JWT configs. The token is valid but from the apigee i am keep getting below:

{

"fault": {

"faultstring": "Invalid token: policy(JWT-qashiertest)",

"detail": {

"errorcode": "steps.jwt.InvalidToken"

}

}

}


where my jwt-verify configs is:

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<VerifyJWT continueOnError="false" enabled="true" name="JWT-qashiertest">

<DisplayName>JWT-qashiertest</DisplayName>

<Algorithm>RS256</Algorithm>

<Source>request.header.authorization</Source>

<PublicKey>

<JWKS uri="https://www.googleapis.com/service_accounts/v1/metadata/x509/securetoken@system.gserviceaccount.com"/>

<!-- <Value ref="private.jwks"/> -->

</PublicKey>

<TimeAllowance>3650d</TimeAllowance>

<Issuer>https://securetoken.google.com/{firebaseId}</Issuer>

<Audience>{firebaseId}</Audience>

</VerifyJWT>


May I know which part I config it wrong?

Thanks!