1

I am familiarizing myself with react-aad-msal library. I'm trying to use it for authentication and securing our APIs in Azure. I have a SPA, a "gateway" api, and three specific apis. The plan is to use implicit flow between the SPA and the gateway API. Between the gateway and the specific APIs, I plan to use client credentials flow. With the code below, I successfully obtain an id token and what is labeled as an access token. I use jwt-decode to decode the both tokens and they are the same. Is this the expected behavior of this provider? Or is there a config I can set to actually return an actual access token that I can pass along to the gateway API for validation?

ReactDOM.render(
  <AzureAD provider={authProvider} forceLogin={true}>
    <App />
  </AzureAD>,
  document.getElementById('root') 
  );
Obie_One
  • 81
  • 10

0 Answers0