Accessing other app registries with an Azure Access Token

Question

Hello, I have a .net API application integrated with Azure App Register and a mobile application that uses these APIs by purchasing tokens as login via Azure App Register. Since these 2 applications use the same app register, I do not have a problem with token recognition. However, although I have graph API permissions in the register, I cannot make requests to the graph API. I get the unauthorized reply. When you type "https://graph.microsoft.com/.default" in the scope parameter, you get graph access, but this time I get an invalid audience error in my own API application. I have more applications in my app registry. Can I access other applications with the token I get from the register where the mobile is logged in, or can I at least use the graph API while accessing my own API application?

Answer 1

Hi @Gürkan Kuluç (Entek)

Do not apply your custom Web API's access token to the graph API, as these are two different types of APIs and you should request a dedicated token for the graph API.

Access tokens are issued based on the API audience, and when you use an access token with an audience for the Web API to call the graph API, it will report an “invalid audience” error.

By the way, one token can only be used to call one type of API, not other types of APIs.

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.