Azure OpenID connect app prompts for offline access


Azure OpenID connect app prompts for offline access



I've registered an application/client on https://apps.dev.microsoft.com/ requesting only the openid scope, when I try to access that application via a link like



https://login.microsoftonline.com/common/oauth2/v2.0/authorize?response_type=id_token+token&client_id=XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX&response_mode=form_post&redirect_uri=http://localhost:8765/test/response&scope=openid&state=123abc



One of the prompts on the authorization screen is "Access your data anytime" according to https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-v2-scopes#offlineaccess that prompt should only be shown when requesting offline_access.
What can I do to have it not prompt for "Access your data anytime"?





It seems you are using implicit flow. And that must not get a refresh token so "access your data anytime" should not present in consent. Can you try putting a space insted of a '+' in response type as this response_type=id_token token
– Kavindu Dodanduwa
Jun 29 at 10:00





So @KavinduDodanduwa, if I read you correct, I shouldn't be prompted for "access your data anytime"? I tried removing the plus but... it's really just a url encoded space so the difference is the same
– vruum
Jun 29 at 11:47





Yes that's correct. According to docs you shouldn't get the consent page for this
– Kavindu Dodanduwa
9 hours ago









By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Comments

Popular posts from this blog

paramiko-expect timeout is happening after executing the command

Export result set on Dbeaver to CSV

Opening a url is failing in Swift