Cannot authenticate with Graph API access token on proprietary API

Question

I'm trying to use the AD services to authenticate from a react app and send the token to my .Net Core to use the [Authorize] attribute, but as I could figure, the token I get here is just for authenticating into the Graph API.

Is there any way to get a token to use as "auth" header to call my API ?

JS:

this.userAgentApplication = new UserAgentApplication(config.appId, null, null); 

var access_token = this.userAgentApplication.acquireTokenSilent(config.scopes);

Then i get the access_token and send to my backend as an "Authorization" header with the value "Bearer ${access_token}"

juunas · Accepted Answer · 2019-03-08 19:26:06Z

1

You have to specify that you want an access token for your API through config.scopes.

You can use e.g.

api-client-id-here/.default

Or instead of .default you can specify a scope you have defined on the API. You can specify multiple of them if you want multiple scopes.

answered Mar 8, 2019 at 19:26

juunas

59.6k13 gold badges130 silver badges171 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

LuccasMF Over a year ago

I was using MSAL on the React app, now I'm using ADAL and I could authenticate into mine API. The question now is how to retrieve some adittional claims from the AD. eg.: extensionAttribute6

juunas Over a year ago

You can get those from MS Graph API I think. It might also be possible with the claims customization option: learn.microsoft.com/en-us/azure/active-directory/develop/…

Collectives™ on Stack Overflow

Cannot authenticate with Graph API access token on proprietary API

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related