Microsoft Graph API Token Generation From Nodejs Code - node.js

Question

I want to access Microsoft Graph API and for that i am trying to generate Token from Nodejs Code. I am getting Token from nodejs but when i decode this token in jwt.io. i do not see scope parameter. Also when I use this token in accessing Microsoft Graph API it gives error
Authorization_RequestDenied
Code Generation screenshot

Answer 1

The doc https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-client-creds-grant-flow Clearly say that if
grant_type: "client_credentials" the response would be as follows, it won't have scope variable
{
"token_type": "Bearer",
"expires_in": 3599,
"access_token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6Ik1uQ19WWmNBVGZNNXBP..."
}
This is what you are getting, so its working perfectly.
You are looking for scope variable, so you have to follow as
grant_type=authorization_code , the response is
{
"access_token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6Ik5HVEZ2ZEstZnl0aEV1Q...",
"token_type": "Bearer",
"expires_in": 3599,
"scope": "https%3A%2F%2Fgraph.microsoft.com%2Fuser.read",
"refresh_token": "AwABAAAAvPM1KaPlrEqdFSBzjqfTGAMxZGUTdM0t4B4...",
"id_token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJub25lIn0.eyJhdWQiOiIyZDRkMTFhMi1mODE0LTQ2YTctOD...",
}
Here you will get the scope variable, reference is https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-auth-code-flow
So the the way you are calling is important whether client Credential or authorisation_code
EDIT
You have to call the authorise API as follows:
https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize?
client_id=6731de76-14a6-49ae-97bc-6eba6914391e
&response_type=code
&redirect_uri=http%3A%2F%2Flocalhost%2Fmyapp%2F
&response_mode=query
&scope=openid%20offline_access%20https%3A%2F%2Fgraph.microsoft.com%2Fuser.read
&state=12345
Modify your request with the url and params and you will get the response as follows:
GET https://login.microsoftonline.com/common/oauth2/nativeclient?
code=AwABAAAAvPM1KaPlrEqdFSBzjqfTGBCmLdgfSTLEMPGYuNHSUYBrq...
&state=12345
Here is the code you are looking for. SO after this you have to make the above call for token.