Easy trick to test your Azure Active Directory returned ID Tokens

The other day I was trying to troubleshoot an issue where I needed to know what the content of an ID token coming from AAD was for a mobile application. The application was setup to use code flow with PKCE and using fiddler to troubleshoot this didn’t work since AAD is protected with SSL pinning so trying to have fiddler be the man in the middle didn’t work out. It helped me figuring out what request was sent to the server but not the content of the response.

Migrating my blog from Wordpress to Hugo

I finally took the plunge and started to move my blog from Wordpress to Hugo. I had some issues recently where my Wordpress site didn’t work anymore. 1 issue was with the syntax highlighting for the code snippets, caused by an old plugin and new secure browser settings. Took me a while to fix. And recently the editor of Wordpress stopped working properly since there was a secure header setting changed on azure which broke some Javascript on the admin side of Wordpress.