DataConnectors icon indicating copy to clipboard operation
DataConnectors copied to clipboard

Authentication with Azure AD v1 secured implicit endpoints does not support token refresh

Open MedAnd opened this issue 5 years ago • 1 comments

I've managed to implement authentication with Azure AD v1 secured (implicit auth) endpoints however the Power BI SDK for custom data connectors does not support token refresh in this scenario. The implicit auth approach has the benefit of working for multi tenant AAD web applications which are consented & moreover this approach does not require a 2nd native application to be registered in AAD just for the data connector. For example auth is working against:

https://login.microsoftonline.com/common/oauth2/authorize?response_type=id_token&response_mode=query&client_id=xxxxxxxxxxxxxxxxxxxxxxxxxx

for the id_token to be refreshed though, the same endpoint can be used in AAD v1 implicit auth flow with prompt=none, but this fails as AAD is expecting AAD set cookies to be played back.

Adding support for cookies (store them in context on original login) set by the auth provider will allow token refresh when using Azure AD v1 secured (implicit auth) endpoints.

MedAnd avatar Aug 24 '18 01:08 MedAnd