CODEWITHSUNDEEP
azureazure-active-directoryadalazure-ad-b2c
krishna priya nukala
krishna priya nukala

Reputation: 43

AZURE AD ADAL "error":"invalid_grant","error_description":"AADSTS70000: Transmission data parser failure: Authorization Code is malformed or invalid

I am trying to Authenticate using AZURE AD. I took the java client code from the git [https://github.com/Azure-Samples/active-directory-java-webapp-openidconnect][1].

I am able to make the authorize call and get the Authorization code. By passing the authorization code to get the access token using the acquireTokenByAuthorizationCode method from the oauth2 jar. Here I am getting the below error.

"error":"invalid_grant","error_description":"AADSTS70000: Transmission data parser failure: Authorization Code is malformed or invalid.

How to pass the grant_type=authorization_code to the acquireTokenByAuthorizationCode method?

How to check the post request which got fired? I am not able to see it in the network section of the chrome?

Below is the code:

        String authCode = authorizationCode.getValue();
        ClientCredential credential = new ClientCredential(clientId,
                clientSecret);
        AuthenticationContext context;
        AuthenticationResult result = null;
        ExecutorService service = null;
        try {

            ThreadFactory factory = ThreadManager.currentRequestThreadFactory();
            service = Executors.newCachedThreadPool(factory);

            context = new AuthenticationContext(authority + tenant + "/", true,
                    service);

            Future<AuthenticationResult> future = context
                    .acquireTokenByAuthorizationCode(authCode, new URI(
                            currentUri), credential, null);

The post request should be: String redirectUrl = authority + this.tenant + "/oauth2/v2.0/token?p=b2c_1_abcd&grant_type=authorization_code&resource=https%3a%2f%2fgraph.windows.net&redirect_uri=" + URLEncoder.encode(REDIRECT_URL, "UTF-8");

Not sure how to provide the information which is in bold.

Upvotes: 3

Views: 3249

Answers (1)

juunas
juunas

Reputation: 58733

EDIT after more info

If you are using v2 endpoints, you can't use ADAL.

If you have registered your app in the v2 dev portal, you need to register your app via Azure Portal's Azure AD interface. And then make sure your Azure AD URLs do not include v2.0.

To get a token with authorization code, you use acquireTokenByAuthorizationCode (https://github.com/Azure-Samples/active-directory-java-webapp-openidconnect/blob/master/src/main/java/com/microsoft/aad/adal4jsample/BasicFilter.java#L268-L270):

Future<AuthenticationResult> future = context
                .acquireTokenByAuthorizationCode(authCode, new URI(
                        currentUri), credential, null);

You will not see the request in Chrome because it goes from your web server to Azure AD. The browser is not a part of the chain. And that's a good thing since we are passing the client secret to Azure AD. You can use tools like Fiddler to monitor the traffic.

Upvotes: 2

Related Questions