AdalServiceException: AADSTS7000215: Invalid client secret is provided

amsDeveloper 71 Reputation points
2019-12-11T00:09:19.353+00:00

My Web App, which was working fine till yesterday, has suddenly started throwing the exception below since yesterday.

AggregateException: One or more errors occurred.
System.Threading.Tasks.Task.ThrowIfExceptional(bool includeTaskCanceledExceptions)

AdalServiceException: AADSTS7000215: Invalid client secret is provided.
Trace ID: de067aef-cfed-4468-9488-633704897701
Correlation ID: e0449ed4-02ab-4cf2-8859-e5f049e5f8e7
Timestamp: 2019-12-11 00:02:30Z
Microsoft.IdentityModel.Clients.ActiveDirectory.AdalHttpClient.GetResponseAsync(bool respondToDeviceAuthChallenge)

From brief investigation, I found that some service/application has expired. But, not able to figure out which one. Because, in "App Registrations" in Active Directory, all registrations which were expired have now been updated with new client secrets.

Also, this has started happening after Base64 encoding was done for setting Blob Metadata with;

Convert.ToBase64String(System.Text.Encoding.UTF8.GetBytes(metaattribute.Trim()))

The indexer has been given FieldMapping decoder as below;

FieldMapping("MetaAttribute", "MetaAttribute", FieldMappingFunction.UrlDecode())

How do I troubleshoot this? I don't see "App Service" registration in "App Registration". Is that the cause?

alt text

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
14,660 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
4,905 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. amsDeveloper 71 Reputation points
    2019-12-11T06:58:21.367+00:00

    I had to create a new Client Secret Key (in Active Directory->App Registrations) for my Media Services application and replace the old key with new one in the code. Not sure why Azure doesn't give any specific warnings before token expiration date..