Exception of type 'Microsoft.IdentityModel.Tokens.AudienceUriValidationFailedException

Yash Gupta 0

After getting the token from oauth2 v2.0/token from i am trying to get https:/{name}.sharepoint.com/_api/Lists/getbytitle('listname') but getting an error

error_description:Exception of type Microsoft.IdentityModel.Tokens.AudienceUriValidationFailedException was thrown.

also i am passing

Header

Accept:application/json;odata=verbose

Content-Type:application/json;odata=verbose

Authorization:Bearer please tell what i am doing wrong

Prasad-MSFT 6,876 Reputation points Microsoft Vendor

2024-06-04T05:25:32.25+00:00

Could you please set the scope as https://yourSite.sharepoint.com/.default or detailed scope, such as: https://yourSite.sharepoint.com/Sites.ReadWrite.All and check if it helps?

And now it is suggested to use Microsoft Graph API to manage your sharepoint site.
Yash Gupta 0 Reputation points

2024-06-04T06:59:16.87+00:00

after changing the scope i am still getting an error 401 i am also hit url in postman
CarlZhao-MSFT 42,131 Reputation points

2024-06-04T07:07:06.9533333+00:00

Try using jwt.ms to decode your access token and share a screenshot.
Yash Gupta 0 Reputation points

2024-06-05T05:30:06.22+00:00

i am providing snapshot of decoded token pleases tell me what i am doing wrong.
Yash Gupta 0 Reputation points

2024-06-05T05:30:32.8566667+00:00
CarlZhao-MSFT 42,131 Reputation points

2024-06-05T06:30:10.58+00:00

Is this an access token or an id token? What is your type of application? Web or SPA?
Yash Gupta 0 Reputation points

2024-06-05T07:13:10.6533333+00:00

This is Access token and its an spa application and i am getting access token after login but at the time of fetch SP list data it is giving error of 401 tell I m doing wrong

1 answer

CarlZhao-MSFT 42,131 Reputation points

2024-06-04T10:01:26+00:00

Hi @Yash Gupta

Make sure your scope value is set to https://{tenant-name}.sharepoint.com/.default.

Here is an example call:

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.
Please sign in to rate this answer.
Yash Gupta 0 Reputation points

2024-06-05T05:14:11.75+00:00

when i am try authorization but getting an error 02325: Proof Key for Code Exchange is required for cross-origin authorization code redemption.

Prasad-MSFT 6,876 Reputation points Microsoft Vendor

2024-06-05T12:58:15.9366667+00:00

The error "AADSTS9002325: Proof Key for Code Exchange is required for cross-origin authorization code redemption" typically indicates that the authorization code was sent from a different origin than the redirect URI specified in the initial authorization request. This is a security feature designed to prevent unauthorized access to the user's access tokens. To resolve this issue, you need to ensure that the redirect URI specified in your initial authorization request matches the redirect URI specified in the Azure AD application registration. You also need to ensure that the same redirect URI is used in both the initial authorization request and the subsequent token request.

If you are using a single-page application (SPA), you may need to use the Proof Key for Code Exchange (PKCE) flow instead of the standard authorization code flow. PKCE is a security feature that helps prevent authorization code interception attacks.
Similar thread: https://learn.microsoft.com/en-us/answers/questions/1482928/how-to-fix-aadsts9002325-proof-key-for-code-exchan
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Exception of type 'Microsoft.IdentityModel.Tokens.AudienceUriValidationFailedException

1 answer

Your answer