azurejwtazure-active-directorytokenadal.js

Azure App Registration : scope list not complete


I created an azure App registration :

demo

I used Adal for authentification :

demo2

the problem is when I decrypt the generated tokens ( sharepoint and graph api), I get :

"scp": "User.Read",

I need to know :

Thanks,


Solution

  • I'm guessing in this case it might be the behaviour of the v1 endpoint where if you have already consented to something on an API, it'll just give you the token with those, regardless that you added more.

    You can add prompt=consent to the authorization URL when your app redirects you to log in. This will force consenting to all permissions again.