如何在授权代码流 Azure AD B2C 中获取用户配置文件信息？

Question

In Auth Code flow, azure tenant provides a auth code upon successful authentication( username/pwd ), then this code can be traded for access_token (useful to protect our resource APIs). When I use this access_token to get profile details using graph /me endpoint I'm getting invalid token exception. So, how can I get user profile details in this flow?

Appreciate your help!!

Answer 1

An access token can be used only for one resource.

The access token which is for your resource API cannot be used to call Microsoft Graph.

You should set scope=https://graph.microsoft.com/.default offline_access during getting code and access token.

But currently it's not supported to get access token for Microsoft Graph via Request an access token in Azure Active Directory B2C . It's only for protecting your APIs.

You need to follow Get access on behalf of a user to get the access token with Auth Code flow.

Answer 2

Implicit flow is the only flow supported for SPA. Authorization code flow is intended for webapps, mobile and desktop apps but not for SPA.Please refer to this document