This component makes it super simple to validate a JWT token issued by the Azure Active Directory. Currently the version is not usinge caching this means the certificates will be downloaded from Mirosoft with every verification request. If you are using Azure AAD tokens in every request against your API additional caching would make sense.

var aad     = require('azure-ad-jwt');

var jwtToken = '<<yourtoken>>';

aad.verify(jwtToken, null, function(err, result) {
    if (result) {
        console.log("JWT is valid");
    } else {
        console.log("JWT is invalid: " + err);
    }
});

The library is a wrapper around the jsonwebtoken module so the options field can be used as described in this project. The following example checks if it is a valid graph API token:

aad.verify(jwtToken, { audience: 'https://graph.windows.net'}, function(err, result) ...