Azure OpenID connect app prompts for offline access
Azure OpenID connect app prompts for offline access
I've registered an application/client on https://apps.dev.microsoft.com/ requesting only the openid scope, when I try to access that application via a link like
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?response_type=id_token+token&client_id=XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX&response_mode=form_post&redirect_uri=http://localhost:8765/test/response&scope=openid&state=123abc
One of the prompts on the authorization screen is "Access your data anytime" according to https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-v2-scopes#offlineaccess that prompt should only be shown when requesting offline_access.
What can I do to have it not prompt for "Access your data anytime"?
So @KavinduDodanduwa, if I read you correct, I shouldn't be prompted for "access your data anytime"? I tried removing the plus but... it's really just a url encoded space so the difference is the same
– vruum
Jun 29 at 11:47
Yes that's correct. According to docs you shouldn't get the consent page for this
– Kavindu Dodanduwa
9 hours ago
By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.
It seems you are using implicit flow. And that must not get a refresh token so "access your data anytime" should not present in consent. Can you try putting a space insted of a '+' in response type as this response_type=id_token token
– Kavindu Dodanduwa
Jun 29 at 10:00