Azure-Samples/ms-identity-javascript-v2

Issue with AADSTS7000218 - 'client_assertion' or 'client_secret'.

Tzvetelin88 opened this issue · 1 comments

Hello,

I get this error:

ServerError: invalid_client: 7000218 - [2020-09-25 07:40:47Z]: AADSTS7000218: The request body must contain the following parameter: 'client_assertion' or 'client_secret'.

after removing "Mail.Read" from scope, because I don't need it:

scopes: ["Mail.Read", "openid", "profile", "User.Read"],

what could be the issue here?

Actually I found the issue.
It was a configuration under Azure AD Application Registration where I have selected WEB and now SPA and there was checkbox under Implicit for ID token.