Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

scenario 3 - protect and call web api on azure ad b2c - infinite loop

See original GitHub issue

Issue

Please provide us with the following information:

This issue is for the sample

    - [ ] 1-1) Sign-in with Azure AD
    - [ ] 1-2) Sign-in with Azure AD B2C
    - [ ] 2-1) Acquire a Token and call Microsoft Graph
    - [ ] 3-1) Protect and call a web API on Azure AD
    - [x] 3-2) Protect and call a web API on Azure AD B2C
    - [ ]   4) Deploy to Azure Storage and App Service
    - [ ] 5-1) Call a web API using App Roles
    - [ ] 5-2) Call a web API using Security Groups
    - [ ] 6-1) Call a multi-tenant web API
    - [ ] 7-1) Call Microsoft Graph using on-behalf-of flow
    - [ ] 7-2) Call a web API using Proof of Possession tokens

This issue is for a

    - [x] bug report -> please search issues before submitting
    - [ ] question
    - [ ] feature request
    - [ ] documentation issue or request

Minimal steps to reproduce

Follow the sample tutorial step by step

Any log messages given by the failure

Expected/desired behavior

I should be able to access the web-api / edit my profile

Library version

Browser and version

Safari?

Mention any other details that might be useful

I can login fine (I had to go to the portal first and configure the sign in policy to allow the user to self reset his password) but then when i click the TodoList button it goes to an infinite loop (looks like login/logout)

https://user-images.githubusercontent.com/2547646/120226164-f5aa2580-c246-11eb-9565-9e3f29b98bd7.mov

here is my repo https://github.com/jeromechrist/repro-step-b2c

Thanks! We’ll be in touch soon.

Issue Analytics

State:
Created 2 years ago
Comments:13 (11 by maintainers)

Top GitHub Comments

2reactions

derisencommented, Jun 1, 2021

@jeromechrist looks like the app is never receiving an access token from B2C, which causes the loop as acquireTokenRedirect keeps trying. For a start, can you double check if you have granted admin consent to permissions on Azure AD B2C portal (SPA app registration)? I’ve just realized this step is missing in registration steps -apologies for that.

1reaction

jeromechristcommented, Jun 4, 2021

Yep, created there https://github.com/AzureAD/microsoft-authentication-library-for-js/issues/3713