scenario 3 - protect and call web api on azure ad b2c - infinite loop about ms-identity-javascript-angular-tutorial

[derisen]

@jeromechrist looks like the app is never receiving an access token from B2C, which causes the loop as acquireTokenRedirect keeps trying. For a start, can you double check if you have granted admin consent to permissions on Azure AD B2C portal (SPA app registration)? I've just realized this step is missing in registration steps -apologies for that.

[derisen]

@jeromechrist thank you very much for the details and the repro link, I was able to reproduce the issue. I'll get back to you as soon as I figure this out.

[jeromechrist]

I just clicked that grant permission button and I can access the APIs feature fine.

But there is still a loop when I click on "Edit Profile"

Screen.Recording.2021-06-02.at.00.04.35.mov

[jeromechrist]

hey @derisen, sorry for the delay, just for the heck of it I tried another browser and it looks like this bug is happening on Safari only, no issues on Edge (dev channel)

on Safari the bug repro is 100%

Screen.Recording.2021-06-03.at.21.13.49.mov

Safari

• Version 14.1.1 (16611.2.7.1.4)
• I have an adblocker (ADGUARD) but I turned it off specifically for this test

Edge

• Version 92.0.902.2 (Official build) Dev(x86_64)
• I have an adblocker (uBlock Origin), didn't turned it off

Mac OS

• 11.4 (20F71)

[jeromechrist]

Yep, created there AzureAD/microsoft-authentication-library-for-js#3713

[derisen]

@jeromechrist strange, I can reproduce this with the edit user-flow you've set up, but not with my edit user-flow. I'm suspecting this is to do with your configuration. Have you configured any user attributes and/or application claims? It might be that there is no attribute/claim to edit, which might cause the edit screen not show up at all.

[jeromechrist]

@derisen yep that was the case, I did selected claims in "Application claims" but no in "User attributes". After setting a few it works !

Thank you for helping troubleshoot the issue

[derisen]

@jeromechrist awesome! I'll update the sample README with the missing admin consent step and add some remarks about setting up user claims. Really appreciate all the details you provided in the issue -makes our lives easier : )

[jeromechrist]

@derisen heyyyyy sorry, it did resolve the edit profile part but the loop is back on the API 😕

Screen.Recording.2021-06-02.at.16.07.42.mov

[derisen]

@jeromechrist hmm, I'll check this with B2C team and get back to you. In the meantime, can you send me a network trace using Fiddler? My email is on my GitHub profile.

[derisen]

@jeromechrist Ok, I've just tested this on a Mac with Safari and I can reproduce it as well.

At this point, it would be best to raise this issue in the main MSAL.js repo, as this is likely to do with the msal-angular itself rather than the sample. I can't seem to transfer it, can you please create a bug report there?

[github-actions]

This issue has not seen activity in 14 days. If your issue has not been resolved please leave a comment to keep this open. It will be closed in 7 days if it remains stale.

[github-actions]

This issue has been closed due to inactivity. If this has not been resolved please open a new issue. Thanks!