Skip to content

Revert "Be able to change the accessToken of a request" - #80

Merged
Caitlin Russell (caitlinrussell) merged 1 commit into
devfrom
revert-79-patch-5
Apr 30, 2018
Merged

Revert "Be able to change the accessToken of a request"#80
Caitlin Russell (caitlinrussell) merged 1 commit into
devfrom
revert-79-patch-5

Conversation

@caitlinrussell

Copy link
Copy Markdown

Reverts #79

I need to reinvestigate the issues with the current auth flow. Password grant flow should not use a client secret to get an access token.

@psignoret

Copy link
Copy Markdown

More specifically:

  • For clients registered as public clients ("native client app" in the Azure portal), the Resource Owner Password Credentials flow is supported, but does not use a secret.
  • For clients registered as confidential clients ("web app/web API" in the Azure portal), the Resource Owner Password Credentials flow is not support (even though it technically works, when you include a secret).

For the tests here, the client (i.e. identified by CLIENT_ID) should be registered as a native client app in Azure AD, and no client_secret parameter should be used.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants