Resource parameter when requesting access token?

Question

I'm following this guide to authenticate with Microsoft Graph. I am able to successfully do the first request (for an authorization code) but am having issues with the second request (requesting an access token). Params for the second request (for access token): ``` client_id: client_secret: code: redirect_uri: http://localhost:8080/Callback grant_type: authorization_code scope: https://graph.microsoft.com/user.read ``` Error from second request: ``` { "error": "invalid_resource", "error_description": "AADSTS50001: Resource identifier is not provided. Trace ID: Correlation ID: Timestamp: 2017-05-03 15:25:42Z", "error_codes": [ 50001 ], "timestamp": "2017-05-03 15:25:42Z", "trace_id": , "correlation_id": } ``` However, my request works fine (returns a bearer and refresh token) if I add this extra parameter: ``` resource: https://graph.microsof…

Accepted Answer

It looks like your providing the correct properties but not in the correct format. To get the token you need to issue a POST this data formatted for `application/x-www-form-urlencoded` to `https://login.microsoftonline.com/common/oauth2/v2.0/token`. From your example, it looks like your sending your data as `JSON` rather than `x-www-form-urlencoded`.

```
POST URL: https://login.microsoftonline.com/common/oauth2/v2.0/token
POST HEADER: Content-Type: application/x-www-form-urlencoded
POST BODY: grant_type=authorization_code&code=[AUTHORIZATION CODE]&
           client_id=[APPLICATION ID]&client_secret=[PASSWORD]
           &scope=[SCOPE]&redirect_uri=[REDIRECT URI]
```

I wrote up a Microsoft v2 Endpoint Primer a few months back that might help walk you through the procedure.

Resource parameter when requesting access token?

Solution

Problem