OauthAllowImplicitFlow set to True. MSAL 2.x apps do not support Implicit flow. about ms-identity-javascript-v2

[Tzvetelin88]

I think this is the answer?

Important

MSAL.js 2.0 does not currently support Azure AD B2C for use with the PKCE authorization code flow. At this time, Azure AD B2C recommends using the implicit flow as described in Tutorial: Register an application. To follow progress on this issue, see the MSAL.js wiki.

[derisen]

@Tzvetelin88 thanks for bringing this up -this needs updating. At the moment, Azure AD Powershell moudle does not allow to creating an application as "Single-page Application" (platform), which breaks the PKCE. So the registration script is not usable right now (with msal 2.x apps -1.x apps are fine).

[Tzvetelin88]

Thanks, I see.
So, should I remove checkboxes from Access Tokens and ID tokens from section Implicit grant?
Further more I will check Azure documentation for SAP creation, which I think is here: https://docs.microsoft.com/en-us/azure/active-directory/develop/scenario-spa-app-registration#redirect-uri-msaljs-20-with-auth-code-flow

and I have one last question about redirect URI. If I'm using React, should I specify Redirect URI like http://localhost:3000/auth, where auth is a blank page or I need only http://localhost:3000/ ?

Thanks!

[derisen]

You're welcome : ) That right, for the moment please follow the steps here. A new Azure AD powershell module has been released yesterday and we are investigating if this is now supported.

Regarding your redirect uri question: both of them should be fine. There's a react sample here that you might find useful.

[derisen]

Will keep this open until the ps script is updated.