Unanswered

oauth2 implicit flow returning an invalid token

(0) Share

Report

Posted on by sdnwkjd

I want to get outlook contacts into my ionic/angular web app. I'm trying to get the access token for microsoft api using implicit flow in order to access user's contacts. I've tried the following so far :

use this url to get access token in the url parameter from redirect (after user login)

"https://login.microsoftonline.com/common/oauth2/v2.0/authorize?"

+"client_id={CLIENT_ID_HERE}" +"&response_type=token"

+"&redirect_uri=https%3A%2F%2Flocalhost%3A8100%2F"

+"&scope=offline_access openid contacts.read contacts.read.shared user.read"

+"&nonce=89289"//tried both with and without this

+"&response_mode=fragment";

I get an access token in the redirect url, but its actually invalid, eg :

EwBoA8l6BAAUO9chh8cJscQLmU%2bLSWpbnr0vmwwAASwN7zn/GFDP4wdOkrbA8xsurg0RceNlSsJiBj8uqZkK2E%2bmWTXjrj89FuiSlBcKqAe6dyuEbTOn8YBu3xApWaBKZjuP5lJZnAnWZX80Il7VtWMh2UuK/s4qxOZRYcgJEhwe8iTrPOGofm5Z3oU2o1MzGpSa6qaR1AleeKF9q0hZoV99BKLfRUOueK7LRwpnF4mGjLjTevNCUDGIo1N38FPH5bFPhSfAOVDSV%2bw7ZZO6NAS5Vo6HdgbPWC3Eml9Ix4twyzpgf7e4Q0l3oi%2b23iPtTvyNV16cEtt9jehdZ1TjSLdMj92Yc7e18Y%2bwV1SGav1qZ2Lyd/e3xNDmZz1P%2bSkDZgAACIkGgjdNZrtHOALgj5s3vZkDiURxDQzucVxbzf/p1XCG9qfCStUazMWbp9KlGkpIgHyigTVJfUVjYwht8X77wC3Oa%2btShphq2myn4C7LZp7nfpwGz4bSW0lx42SG2ADn33qu2hh4Mc%2bdJskI4pxGOUnurKnxFH0sxKpCisIIiWylPOgiOqCzH9AGyEaat91glrwzaHfKXXgzMeO88PeEjZ5Rfj0q4dxd4OTv67E8cp%2bXeYhhHerElKMi2LJmt65heTfwLOd7ErVawl9dS77nyMNp1OCow%2bvSysLuvHNCzN9gsUtMgH7a0C78t6cm1NiNsa8Yzk2yZ%2bjPiiNGgilvyv1zSMvAwYrcGjSW/yHY%2bQfn0ijEeo3Qq2tczoq/8/mx3kV50qNla5BWHltaMvwqxxQqk/ZXIJrph9qQsnPcRJcjtvXaSatMPwFoiBYLqTyezcYq6rbvLxbsiEhtE9pQMvMpmu2lzbEdnGYKtMQVjIbBJB7brzFDJ%2bmG2YdLPA9vmsqrmOJM8ZiftWRrDW9alMrml%2bcscmO1vqJuftn3uylvhnAQZP3q40CicqyEcrwSBA29%2bFQGbG/BDIHH0rtUXPsMkwKneJYluVXfMbxUlUxUJhCS79Dd4Jjrk3RX7QWj1WwEz9WlYAwyP0s/PnqPQOVodnwMaHNo%2bV2Xk1/5xi5dcU/Tt2TPJvCvHfS7p4i3%2bKlwTgn2llRMFkVFbf32BM2oaQPlSL7CPDU27IPGoW1xYSYa7ZdNjqvBGak1UNNee%2bStggI%3d

Categories:

Power Apps portals

I have the same question (0)

All responses (4)

Answers (0)

Sort by

v-xida-msft Microsoft Employee on at

Like (0)

Report
Copy link

Link copied!
Hi @sdnwkjd ,

Could you please share a bit more about your scenario?

Do you want to get the Access Token from the URL that you specified?

Based on the URL that you mentioned, I think it is used to get authorization code rather than Access Token. If you want to get Access Token from Microsoft identity platform, you need to send a POST Reuqest to the /token endpoint as below (rather than /authorize endpoint):

POST /{tenant}/oauth2/v2.0/token HTTP/1.1 Host: https://login.microsoftonline.com Content-Type: application/x-www-form-urlencoded client_id=6731de76-14a6-49ae-97bc-6eba6914391e &scope=user.read%20mail.read &code=OAAABAAAAiL9Kn2Z27UubvWFPbm0gLWQJVzCTE9UkP3pSx1aXxUjq3n8b2JRLk4OxVXr... &redirect_uri=http%3A%2F%2Flocalhost%2Fmyapp%2F &grant_type=authorization_code &client_secret=JqQX2PNo9bpM0uEihUPzyrh // NOTE: Only required for web apps

More details about getting Access Token from Microsoft identity platform, please check the following article:

https://docs.microsoft.com/en-us/graph/auth-v2-user

Best regards,

Was this reply helpful? Yes No
sdnwkjd 6 on at

Like (0)

Report
Copy link

Link copied!

@v-xida-msft I'm trying to use implicit flow to get the access token. If you look at implicit flow, you'll notice the url is correct. However, its returning an invalid token and i'm not sure how to solve that.

Note : I'm using this from an ionic/angular app so the /token endpoint gives a cors error. Thats the reason i'm using implicit flow.

Sorry for the late response (thought I was supposed to receive email whenever theres an update to this post)

Was this reply helpful? Yes No
sdnwkjd 6 on at

Like (0)

Report
Copy link

Link copied!

I'm using the docs here https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-implicit-grant-flow

but I'm still getting invalid token

Was this reply helpful? Yes No
sdnwkjd 6 on at

Like (0)

Report
Copy link

Link copied!

@v-xida-msft ???

Was this reply helpful? Yes No