Unanswered

Audience validation failed for OAuth 2.0 implicit grant flow within portal

(0) Share

Report

Posted on by Community Power Pla... Microsoft Employee

I have integrated OAuth 2.0 implicit grant flow within portal following this below document:

https://docs.microsoft.com/en-us/powerapps/maker/portals/oauth-implicit-grant-flow#register-client-id-for-implicit-grant-flow

but getting following error in my api while debugging:

{"xxxxxx: Audience validation failed. Audiences: ''. Did not match: validationParameters.ValidAudience: 'xxxxxxxxxxxxxxxxxx' or validationParameters.ValidAudiences: 'null'."}

I have added these site settings in my portal:

Connector/ImplicitGrantFlowEnabled to True

ImplicitGrantFlow/TokenExpirationTime to 3600

ImplicitGrantFlow/RegisteredClientId to Client ID (from azure AD app)

ImplicitGrantFlow/{ClientId}/RedirectUri to my portal page

I have integrated this following Token Endpoint JavaScript code in portal page:

https://github.com/microsoft/PowerApps-Samples/blob/master/portals/TokenEndpoint.js

and my azure hosted API code here:

https://github.com/microsoft/PowerApps-Samples/tree/master/portals/ExternalWebApiConsumingPortalOAuthTokenSample

What I have done wrong for which the above error is generating?

Categories:

Power Apps portals

I have the same question (0)

All responses (4)

Answers (0)

justinburch Microsoft Employee on at

Like (0)

Report
Copy link

Link copied!

Hi @Anonymous,
It's been awhile since I've implemented this. At what point in the sample code is the error being thrown?

Was this reply helpful? Yes No
Community Power Pla... Microsoft Employee on at

Like (0)

Report
Copy link

Link copied!

Hi Justin,
Thanks your reply. I have deployed C# sample into azure hosting. Trying to access whoami api url from portal providing client id in both of js and c# platform. But getting the mentioned above error while debugging in audience validation and the result is 401 unauthorized access to that api.

in this site setting: ImplicitGrantFlow/{ClientId}/RedirectUri
do I need to replace the full {ClientId} with azure ad client id?

I think something is wrong in my setting which need to identify.

Was this reply helpful? Yes No
justinburch Microsoft Employee on at

Like (1)

Report
Copy link

Link copied!

Hi @Anonymous,
Yes, you would need to replace the ClientID with the actual client ID. Have you tried this?

Was this reply helpful? Yes No
Community Power Pla... Microsoft Employee on at

Like (0)

Report
Copy link

Link copied!

Hello Justin,
Thank you for your reply.

Yes I added the client id there but the issue was since my token doesn't contain any aud value so I need to set validateAudience false in c# code. It works now.

Was this reply helpful? Yes No