Azure teams bot - verify request source/content

Question

Hi,Before processing message by our application , we want to validate if the message is sent from MS teams and someone is not impersonating.&nbsp;Does Teams Azure bot support any HMAC signature implementations? or something else that can ensure&nbsp;the request body hasn't changed?&nbsp;Like here:Verifying HMAC from Microsoft Teams custom Bot in PHPVerifying HMAC from Microsoft Teams bot in Python Flask&nbsp;Thanks

nivedipa-msft · Answer

chisr - Could you please track this issue here: https://stackoverflow.com/questions/78811619/ms-teams-azure-bot-verify-request-content

chisr · Answer

Thanks.Is there no other way to verify that the content has not changed ?What do you suggest to do in the meantime, check only the token parts (exp, iss, aud) ?

Forum Discussion

Azure teams bot - verify request source/content

Share

Resources