Cannot acquire token in web app context.

I am running a web app hosted in iis express at http://localhost:52419/ and the calls get stuck in token generation forever. But when I test the method from console, it all works fine : there is no problem with token generation (await daemonClient.AcquireTokenForClientAsync(new[] {msGraphScope});.

  <add key="AuthorityFormat" value="https://login.microsoftonline.com/{0}/v2.0" />
<add key="RedirectUri" value="https://localhost:44316/" />
<add key="MsGraphScope" value="https://graph.microsoft.com/.default" />

public static GraphServiceClient GetAuthenticatedClient(ApplicationIdentity applicationIdentity,
            string tenantId)
        {
            var authorityFormat = ConfigurationManager.AppSettings["AuthorityFormat"];
            var redirectUri = ConfigurationManager.AppSettings["RedirectUri"];
            var msGraphScope = ConfigurationManager.AppSettings["MsGraphScope"];

            var graphClient = new GraphServiceClient(
                new DelegateAuthenticationProvider(
                    async requestMessage =>
                    {
                        var daemonClient =
                            new ConfidentialClientApplication(applicationIdentity.Id,
                                string.Format(authorityFormat, tenantId), redirectUri,
                                new ClientCredential(applicationIdentity.Secret),
                                null, new TokenCache());
                        var authResult =
                            await daemonClient.AcquireTokenForClientAsync(new[] {msGraphScope}); // When run application as web then the call gets stuck here forever.

                        // Append the access token to the request.
                        requestMessage.Headers.Authorization =
                            new AuthenticationHeaderValue("bearer", authResult.AccessToken);
                    }));
            return graphClient;
        }

[jmprieur]

glad to read it did, @sameerkattel, and thanks for the update! @jennyf19 : we need to be explicit about this in the conceptual documentation (in the Client Creds section, add a paragraph for ASP.NET controllers that need to be async, and a troubleshooting FAQ for MT.

[jmprieur]

@sameerkattel. I suspect you are experiencing a MT issue. I don’t think that you should use .Result(). See Reminder: Do not call ADAL or MSAL async methods synchronously from the UI thread

I’d advise you change your controller action to be async and return Task<HttpResponseMessage>, and then change the following line to:

var user = await graphServiceClient.Me.Request().GetAsync();

GetAuthenticatedClient() does not seem async by itself so I think it’s ok. HTH