ERROR: "invalid_client" with "AADSTS700025: Client is public so neither 'client_assertion' nor 'client_secret' should be presented

user_17730036 0
Viewed 2189

During authorisation of microsoft graph application using msal library, I am getting below error:

"error": "invalid_client", "error_description": "AADSTS700025: Client is public so neither 'client_assertion' nor 'client_secret' should be presented.
"error_codes": [700025]

Can somebody help?

msal microsoft-graph-api azure-active-directory
1 Answers

As your web application uses backend as Django and front end as Angular, you can use redirect URI platform as Single Page Application

You need to use MSAL.js Authentication in your SPA Application to acquire the access token.

Then your backend Django application validates the access token

Note: If you are using MSAL.js v2.x, you need to use authorization code flow

Reference: Migrate JavaScript single-page app from implicit grant to authorization code flow - Microsoft identity platform | Microsoft Docs

user_166938760
Related