How to use private_key_jwt with Azure AD?

[nlfiedler]

Very straightforward code works perfectly with Okta, but with Azure all sorts of problems ensue. Need to override aud to make Azure happy, which messes up Okta. But even then, Azure insists it cannot find the matching certificate. According to their docs [1] they want the x5t value in the JWT header. Is there a way, using this library, to inject that value? Simply overriding kid does not work, the result is the same; simply adding x5t to the jwk doesn't make a difference either.

Has anyone successfully used this library to authenticate a user with Azure AD using OIDC and client certificates? All I really want is to provide a method that is more secure than "shared secrets." It doesn't have to be private_key_jwt, as long as it works.

[1] https://learn.microsoft.com/en-us/entra/identity-platform/certificate-credentials