There is a rigid requirement from client:
- We are having a gateway web application that performs auth0 authentication.
- based on the claims returned by auth0 this gateway app then redirects user to either admin web app (MVC) or user web app (React).
- this 2nd level web app should only validate JWT token and if its invalid app should redirect user back to gateway application.
I am having problem with step (3). i.e. how to only validate the token? and redirect user to gateway application instead of Auth0.