通过Azure AD B2C中的资源所有者密码凭据流发现404错误

时间:2019-02-02 19:06:56

标签: azure azure-active-directory azure-ad-b2c

我得到下面按照以下示例后的误差: https://docs.microsoft.com/en-gb/azure/active-directory-b2c/configure-ropc

HTTP/1.1 404 Not Found
Cache-Control: private
Content-Type: text/html
Server: Microsoft-IIS/10.0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
404 - File or directory not found.
The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable.

我使用前景帐户,例如myname@outlook.com,具有全局管理员角色,可以按照示例进行操作,但是出现了以上错误。

下面是示例代码:

下面的链接返回表单浏览器的结果:

https://mytenant.b2clogin.com/mytenant.onmicrosoft.com/v2.0/.well-known/openid-configuration?p=B2C_1_ROPC_Auth

测试经由Fiddler中用户流量

https://mytenant.b2clogin.com/mytenant.onmicrosoft.com/oauth2/v2.0/token?B2C_1_ROPC_Auth

Content-Type: application/x-www-form-urlencoded
username=myname@outlook.com&password=mypassword&grant_type=password&scope=openid myappId offline_access&client_id=myappId&response_type=token+id_token

有什么主意吗?

1 个答案:

答案 0 :(得分:0)

您必须确保在令牌请求中包含p=查询参数:

https://mytenant.b2clogin.com/mytenant.onmicrosoft.com/oauth2/v2.0/token?p=B2C_1_ROPC_Auth