You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Obtain Refresh token invoking oauth2 endpoint directly and using AcquireTokenByRefreshToken
Obtain ID token, access token, refresh token for the user using [https://login.microsoftonline.com/organizations/oauth2/v2.0/token endpoint using a Public Client App.
Use the above refresh token to call AcquireTokenByRefresh token method to obtain a new refresh token using MSAL.
AcquireTokenByRefreshTokenParameterBuilder acquireTokenByRefreshTokenParameterBuilder = (app as IByRefreshToken).AcquireTokenByRefreshToken(
scopes,
refreshTokenHttp);
AuthenticationResult authenticationResult = await acquireTokenByRefreshTokenParameterBuilder.ExecuteAsync(CancellationToken.None)
.ConfigureAwait(false);
Note that HomeAccountId details (Identifier, TenantId, ObjectId) in AuthenticationResult is completely incorrect.
Discussed this issue with @bgavrilMS@trwalke and they confirmed that the cause of the issue is that they don't send "client_info" = 1 with this request, so MSAL isn't able to cache the user properly.
The text was updated successfully, but these errors were encountered:
bgavrilMS
changed the title
[Bug] ROPC - Incorrect HomeAccount details populated in AuthenticationResult of AcquireTokenByRefreshToken
[Bug] Incorrect HomeAccount details populated in AuthenticationResult of AcquireTokenByRefreshToken
Oct 7, 2022
Obtain Refresh token invoking oauth2 endpoint directly and using AcquireTokenByRefreshToken
Obtain ID token, access token, refresh token for the user using [https://login.microsoftonline.com/organizations/oauth2/v2.0/token endpoint using a Public Client App.
Use the above refresh token to call AcquireTokenByRefresh token method to obtain a new refresh token using MSAL.
AcquireTokenByRefreshTokenParameterBuilder acquireTokenByRefreshTokenParameterBuilder = (app as IByRefreshToken).AcquireTokenByRefreshToken(
scopes,
refreshTokenHttp);
AuthenticationResult authenticationResult = await acquireTokenByRefreshTokenParameterBuilder.ExecuteAsync(CancellationToken.None)
.ConfigureAwait(false);
Note that HomeAccountId details (Identifier, TenantId, ObjectId) in AuthenticationResult is completely incorrect.
Discussed this issue with @bgavrilMS @trwalke and they confirmed that the cause of the issue is that they don't send "client_info" = 1 with this request, so MSAL isn't able to cache the user properly.
The text was updated successfully, but these errors were encountered: