Azure AD: Authentication missing or malformed

Question

I am using Postman to query the graph API for the list of applications on my instance of AAD.

Auth URL: https://login.microsoftonline.com/common/oauth2/authorize?resource=https%3A%2F%2Fmanagement.azure.com%2F

Access Token URL: https://login.microsoftonline.com/common/oauth2/token

With these, I'm able to get the access token. Now when I attempt to query the graph API for the list of Applications, along with the access token included in the header, I get the following error:

{ "error": { "code": "InvalidAuthenticationToken", "message": "Access token validation failure.", "innerError": { "request-id": "***-***-***", "date": "2017-07-25T16:21:06" } }

}

Is there a way to resolve this?

Edit: I also found something weird that when I receive the Access token, I do not receive the refresh token along with it :|

Thanks!

Navya Canumalla · Accepted Answer · 2017-07-26 00:43:15Z

The resource value in the Auth URL is not the graph API endpoint, so the access token you obtained is for another resource and the graph API cannot validate it. For graph API the endpoint should be https://graph.microsoft.com/

Refresh tokens are not issued for certain OAuth grant types such as the client credentials flow because the client can use its credentials to obtain a new token as required. This may be the reason you don't see the refresh token. In a flow which involves user interaction, the refresh token is used to obtain a new token without requiring user interaction.

Collectives™ on Stack Overflow

Azure AD: Authentication missing or malformed

1 Answer 1

Comments

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Related