Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

How to use client credentials with Azure AD B2C?

See original GitHub issue

I want to programmatically add/remove users from the Azure AD B2C directory I have. I have made my application ‘User administrator’. I also created a client secret in the ‘Certificates & secrets’ section of my app.

In my Spring boot application, I created this bean:

    @Bean
    public ConfidentialClientApplication clientApplication() throws MalformedURLException {

        return ConfidentialClientApplication.builder("<application-id>",
                                                     ClientCredentialFactory
                                                             .createFromSecret("<client-secret>"))
                                            .b2cAuthority("https://mycompb2ctestorg.b2clogin.com/tfp/oauth2/nativeclient")
                                            .build();

    }

Using this bean, I try to get an access_token:

        CompletableFuture<IAuthenticationResult> future = clientApplication
                .acquireToken(ClientCredentialParameters.builder(Set.of("Directory.ReadWrite.All")).build());
        future.handle((authenticationResult, throwable) -> {
            if( throwable != null ) {
                System.out.println("throwable = " + throwable);
                return null;
            }

            String accessToken = authenticationResult.accessToken();
            System.out.println("accessToken = " + accessToken);
            return null;
        });

When I run this, I get an exception:

java.util.concurrent.CompletionException: com.google.gson.JsonSyntaxException: java.lang.IllegalStateException: 
Expected BEGIN_OBJECT but was STRING at line 1 column 1

When I debug, I see that the JSON is not JSON, but a HTML page with this body:

    <body>
        <div id="header"><h1>Server Error</h1></div>
        <div id="content">
            <div class="content-container"><fieldset>
                <h2>404 - File or directory not found.</h2>
                <h3>The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable.</h3>
            </fieldset></div>
        </div>
    </body>

What am I doing wrong?