Emulator path (endorsements not present)

Amit Stein · Amit Stein · commit 757c8b8a780f · 2018-06-19T18:04:51.000-03:00
diff --git a/libraries/botframework-connector/botframework/connector/auth/jwt_token_extractor.py b/libraries/botframework-connector/botframework/connector/auth/jwt_token_extractor.py
@@ -61,13 +61,13 @@ async def _validate_token(self, jwt_token: str, channel_id: str) -> ClaimsIdenti
         key_id = headers.get("kid", None)
         metadata = await self.open_id_metadata.get(key_id)
 
+        if key_id and metadata.endorsements:
+            if not EndorsementsValidator.validate(channel_id, metadata.endorsements):
+                raise Exception('Could not validate endorsement key')
 
         if headers.get("alg", None) not in self.validation_parameters.algorithms:
             raise Exception('Token signing algorithm not in allowed list')
 
-        if not EndorsementsValidator.validate(channel_id, metadata.endorsements):
-            raise Exception('Could not validate endorsement key')
-
         options = {
             'verify_aud': False,
             'verify_exp': not self.validation_parameters.ignore_expiration}
