msal.js

Azure AD B2C Link to Sign Up Page (Not Sign In)

允我心安 提交于 2019-12-25 00:52:36
问题 I'm using Azure AD B2C with msal.js in my React app. Currently, when the user tries to enter the protected area of my app, msal.js redirects the user to the login in page which provides a link to the sign up page. Is there a way for me to send users directly to the sign up page? There are cases when I know the user has not yet signed up so it's bad user experience to send the user first to the sign in page then let them click and go to the sign up page. It would be nicer to just send them

Angular app which invokes B2C-secured Function App API receives 500, Function receives 404

让人想犯罪 __ 提交于 2019-12-24 00:49:57
问题 Angular site hosted on an Azure storage account as a static website receives 500 when it's invoking an Azure B2C-protected Function App function. The function is receiving a 404. Update The original title for this question was "Angular app which invokes B2C-secured Functions App receives 401 Unauthorized response". The solution was, as @Alex AIT suggested (below), to replace the https://<b2c_tenant_name>.b2clogin.com/<b2c_tenant_name>.onmicrosoft.com/v2.0/.well-known/openid-configuration?p=

Is it possible to use MSAL.js to get refresh token?

天涯浪子 提交于 2019-12-22 05:09:35
问题 I want to integrate with Miscrosoft Outlook. I am able to login with MSAL.js and get an access token, but I am not able to get a refresh token. Is there a way to do it? 回答1: I'll assume that since you're using the MSAL.js (https://github.com/AzureAD/microsoft-authentication-library-for-js) that you're using implicit flow for authentication and authorization. Implicit flow doesn't support refresh tokens, but you can request a new token silently. This is done similarly to how you request the

MSAL with Azure AD B2C and Single Sign On

半世苍凉 提交于 2019-12-21 17:11:31
问题 I'm working on a system with a few Angular 4 SPAs each talking to a separate Asp.NET Core 2.0 WebAPI. Azure AD B2C is being used as the identity service for each SPA/API, and MSAL.js as part of our Angular SPAs. We want to support Single Sign-on to prevent the user needing to re-enter credentials when switching from one SPA to another. Is it possible to get single sign-on behavior using msal.js v0.1.7? 回答1: SSO with MSAL.js is possible. For browser-based apps you achieve SSO through cookies

accessing sharepoint REST apis using msal throws 401

一曲冷凌霜 提交于 2019-12-11 08:48:05
问题 If i go to https://developer.microsoft.com/en-us/graph/graph-explorer# and use URL like: https://graph.microsoft.com/beta/sites/4development106.sharepoint.com:/sites/DBSchenker:/lists/OEC_Docs/items I can see request succeeds. Now if i use the angular app from github https://github.com/AzureAD/microsoft-authentication-library-for-js and the code like private sharePointHost: string = "https://4development106.sharepoint.com/sites/DBSchenker/_api/web/lists/getByTitle('OEC_Docs')/items"

Access Token do not include access for API with MSAL

泄露秘密 提交于 2019-12-11 04:26:19
问题 I am using MSAL for JavaScript in a react app to authenticate against Azure AD. I am able to successfully authenticate user and get id token and access token. But the retrieved access token cannot access the API that is secured with Azure AD. Everything is configured find on Azure AD side as I can use the retrieved access token to talk to the API using a dotnet core web app. The difference between dotnet core app and react app is the "resource" attribute. I am not sure how to include that in

Is it possible to use MSAL.js to get refresh token?

a 夏天 提交于 2019-12-05 05:20:08
I want to integrate with Miscrosoft Outlook. I am able to login with MSAL.js and get an access token, but I am not able to get a refresh token. Is there a way to do it? I'll assume that since you're using the MSAL.js ( https://github.com/AzureAD/microsoft-authentication-library-for-js ) that you're using implicit flow for authentication and authorization. Implicit flow doesn't support refresh tokens, but you can request a new token silently. This is done similarly to how you request the token (id or access) in the first place. Unfortunately, I haven't found that MSAL.js does this transparently