diff --git a/src/Microsoft.Identity.Web/Resource/RequiredScopeFilter.cs b/src/Microsoft.Identity.Web/Resource/RequiredScopeFilter.cs index 9aada24b6..5aa7ba344 100644 --- a/src/Microsoft.Identity.Web/Resource/RequiredScopeFilter.cs +++ b/src/Microsoft.Identity.Web/Resource/RequiredScopeFilter.cs @@ -50,7 +50,7 @@ public void OnAuthorization(AuthorizationFilterContext context) private void ValidateEffectiveScopes(AuthorizationFilterContext context) { - if (_effectiveAcceptedScopes == null || _effectiveAcceptedScopes.Length > 0) + if (_effectiveAcceptedScopes == null || _effectiveAcceptedScopes.Length < 0) { throw new InvalidOperationException(IDWebErrorMessage.MissingRequiredScopesForAuthorizationFilter); }