invalid_grant :: AADSTS54005: OAuth2 Authorization code was already redeemed, please retry with a new valid code or use an existing refresh token on authorize request

Angel Martin Sanchez 0

Good evening,

I'm experiencing some issues with the SSO process using the OIDC protocol.When I send the following request:

https://login.microsoftonline.com/{tenant-id}/oauth2/v2.0/authorize?client_id={client_id}&nonce={nonce}&redirect_uri={uri}&response_mode=query&response_type=code&scope=openid%20email

I receive this response:

invalid_grant :: AADSTS54005: OAuth2 Authorization code was already redeemed. Please retry with a new valid code or use an existing refresh token.

Does anyone have insights into this issue?

James Hamil 24,311 Reputation points Microsoft Employee

2024-08-27T20:44:11.8633333+00:00

Hi @Angel Martin Sanchez , can you please look through this thread and let me know if it helps?

Thank you,

James
Angel Martin Sanchez 0 Reputation points

2024-08-28T06:29:19.9833333+00:00
Hi @James Hamil

Yes, I saw this thread, but his error is different. I this thread Hernan do:

call /authorize

call /token

In my case I am receiving thats error as a call /authorize request.

This is the path of redirects followed by my process:

https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize?client_id={client}&nonce={nonce}&redirect_uri={callback}&response_type=code&scope=openid%20email

https://device.login.microsoftonline.com/

https://login.microsoftonline.com/common/DeviceAuthTls/reprocess

my-app/callback?code={code}&session_state={session_state}

Do yo need more information?

Share via

invalid_grant :: AADSTS54005: OAuth2 Authorization code was already redeemed, please retry with a new valid code or use an existing refresh token on authorize request

Your answer