Does MS OAuth 2.0 authorization require php SESSiON activation?

Wojciech Sobiesiak 96

Hello.

I have prepared "custom OAuth 2.0 client-side implementation with persistent storage." solution

When I use file storage to send Access Token have error message

"Email sending failed with status code: 401 Response: {"error":{"code":"InvalidMsaTicket","message":"ErrorCode: 'PP_E_RPS_CERT_NOT_FOUND'. Message: ' Internal error: spRPSTicket->ProcessToken failed. Failed to call CRPSDataCryptImpl::UnpackData: Internal error: Failed to decrypt data. :Failed to get session key. RecipientId=292841. spCache->GetCacheItem returns error.:Cert Name: (null). SKI: b219e529469cc90e1028ea9c506474d1e18b767c...'","innerError":{"oAuthEventOperationId":"4dbf8f11-1945-472f-857f-218a30843e72","oAuthEventcV":"miDhDQiCNT9Q1qdC7xk0Kw.1","errorUrl":"https://aka.ms/autherrors#error-InvalidMsaTicket","requestId":"0de1209a-8208-3f35-50d6-a742ef19342b","date":"2023-08-23T07:09:53"}}}"

checked 2 tokens (sent through a session variable and through a file) and they are exactly the same.

So does MS OAuth 2.0 authorization require php SESSiON activation?

And if , how information about session is sent to Microsoft server. What information is gathered?

Addition:

Please translate it for better understanding.

https://4programmers.net/Forum/Oceny_i_recenzje/369464-instalator_aplikacji_korzystajacych_z_autoryzacji_oauth20?p=1923160#id1923160

https://www.youtube.com/watch?v=W6HyK_qeoHs

https://infinityhost.ct8.pl/installers/oauth2_ms_installer.7z

ChristyZhang-MSFT 24,571 Reputation points Microsoft Vendor

2023-08-24T02:03:47.85+00:00

Hi @Wojciech Sobiesiak ,

Welcome to our forum!

Looks like your issue is more related to OAuth 2.0, please kindly understand that the Outlook tag here we mainly focus on general issues about Outlook desktop client. In order to better solve your problem, we will add "Azure Active Directory" tag.

Thanks for your understanding and hope your issue would be resolved soon.
Givary-MSFT 34,286 Reputation points Microsoft Employee

2023-09-05T09:38:55.6066667+00:00

@Wojciech Sobiesiak Apologies for the delayed response, let me know if the issue still persists, we can connect offline and discuss further on this.
Wojciech Sobiesiak 96 Reputation points

2023-09-08T17:28:15.9766667+00:00

Givary, didn't check it , because I have thousand ideas to code, it's no problem for me, because I don't feel to be responsible to make safe such kind of communication. If I was, I would create non browser application that would oparate in OS sandbox on large amount of encrypted and compressed-for-send-process data and on server also, such kind of solution I think. Bits here, bits there, bits now, bits later, bits sooner for me it's no problem.

But I if MS changed anything and there is need to check this type of authorisation it's enough to tell me this.
Wojciech Sobiesiak 96 Reputation points

2023-11-21T17:26:33.09+00:00

I know what to do I think. I will encrypt content with JS, write it to file with php file, run an outer application which will open the encrypted file, handle the message ,then open winsocket and will sen message. If PHP has such strange behavier this is right attitude. Am I right?

Share via

Does MS OAuth 2.0 authorization require php SESSiON activation?

Your answer