Azure B2C 客户端凭据流抛出 invalid_grant AADB2C90085

Question

我关注了这个资源:https://REDACTED.b2clogin.com/REDACTED.onmicrosoft.com/B2C_1A_DEMO_CLIENTCREDENTIALSFLOW/oauth2/v2.0/token

• Azure B2C 应用注册:
  • protected Web API
    • 公开 api
      • 应用 ID URI = https://{我的租户名称}.onmicrosoft.com/{ protected Web API 客户端 ID}/.default
  • 守护进程控制台应用程序
    • API 权限
      • API = protected Web API
        • 权限 = access_as_application
        • 类型 = 应用
        • 已请求管理员同意 = 是

我使用 OAuth 客户端凭据流程获取 token :

POST https://{my tenant name}.b2clogin.com/{my tenant name}.onmicrosoft.com/{a basic user flow SUSI policy}/oauth2/v2.0/token

scope=https://REDACTED.onmicrosoft.com/{protected web api client id}/.default&
grant_type=client_credentials&
client_id={daemon console app client id}&
client_secret={daemon console app client secret}

错误响应:

{
    "error": "invalid_grant",
    "error_description": "AADB2C90085: The service has encountered an internal error. Please reauthenticate and try again.\r\nCorrelation ID: REDACTED\r\nTimestamp: REDACTED\r\n"
}

Answer 1

我遇到了同样的问题，请仔细检查您的 list 并确保“signInAudience”:“AzureADandPersonalMicrosoftAccount”而不仅仅是您的组织。还要确保您遵循与其他答案相同的步骤。