错误：客户端必须发送client_secret ... [英] Error: Clients must send a client_secret...

问题描述

我有一个iOS移动应用程序已经授权Azure几年没有问题。我突然收到400错误：  {" error"："invalid_request"，"error_description"："AADB2C90079：客户必须在兑换机密资金时发送
a client_secret。\ r \ n相关ID：425f0e65-3940-4f75-af8b-a5648339e21d\\ n时间戳：2019-04-04 19：00：28Z \\ nn"}

发送邮件时发生这种情况

https://login.microsoftonline.com/ {tenant} /oauth2/v2.0/token?p=mypolicy

$获得有效代码后b $ b

。文档清楚地表明移动客户端不发送client_secret。我发送的字段是grant_type，client_id，redirect_uri和代码。 

AFAIK，我身边没有任何变化。错误是间歇性的。

Azure上的某些内容是否有所改变？还有什么想法改变了吗？

解决方案

嗨BrianSS9，

感谢您提出此问题。我正在调查这个并会更新你。

I have an iOS mobile app that's been authorizing to Azure for a couple years with no problems. All of a sudden I'm getting a 400 error: {"error":"invalid_request","error_description":"AADB2C90079: Clients must send a client_secret when redeeming a confidential grant.\r\nCorrelation ID: 425f0e65-3940-4f75-af8b-a5648339e21d\r\nTimestamp: 2019-04-04 19:00:28Z\r\n"}

This is happening when sending a POST to

https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token?p=mypolicy

after getting a valid code. The docs make it clear that mobile clients do not send a client_secret. The fields I am sending are grant_type, client_id, redirect_uri and code. 

AFAIK, nothing has changed on my side. The error is intermittent.

Has something changed on Azure in the way this is supposed to work? Any other idea what's changed?

解决方案

Hi BrianSS9,

Thanks for raising this issue. I am investigating this and will update you.

这篇关于错误：客户端必须发送client_secret ...的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！