Azure B2C - redirect uri provided in the request is not registered for the client id #96

loonix · 2020-05-14T10:59:42Z

Description

Hi guys, I am able to login using the web configs but when I try to login on android it seems that it is not working for me, would be great if someone can give me some help with this.

Steps

Open emulator with app
Click Login
Accesses the login page (azure)
Automatically returns to the app
Throws an error

Chrome Inspector:

main.js:1265 OAuth rejected Error: ERR_GENERAL
    at Object.fromNative (capacitor-runtime.js:226)
    at <anonymous>:1:18

Android Studio:

2020-05-14 11:48:31.958 26720-26720/com.cads.testapp E/Capacitor/Plugin: ERR_GENERAL
    AuthorizationException: {"type":1,"code":1008,"error":"redirect_uri_mismatch","errorDescription":"AADB2C90006: The redirect URI 'com.cads.testapp:\/\/oauth\/redirect' provided in the request is not registered for the client id 'XXXXXXXX-XXXXXXX-XXXXXXX'.\r\nCorrelation ID: XXXXX-XXXXXX-XXXXXX\r\nTimestamp: 2020-05-14 10:48:30Z\r\n"}
        at com.byteowls.capacitor.oauth2.OAuth2ClientPlugin.handleAuthorizationRequestActivity(OAuth2ClientPlugin.java:333)
        at com.byteowls.capacitor.oauth2.OAuth2ClientPlugin.handleOnActivityResult(OAuth2ClientPlugin.java:321)
        at com.getcapacitor.Bridge.onActivityResult(Bridge.java:770)
        at com.getcapacitor.BridgeActivity.onActivityResult(BridgeActivity.java:212)
        at android.app.Activity.dispatchActivityResult(Activity.java:7454)
        at android.app.ActivityThread.deliverResults(ActivityThread.java:4353)
        at android.app.ActivityThread.handleSendResult(ActivityThread.java:4402)
        at android.app.servertransaction.ActivityResultItem.execute(ActivityResultItem.java:49)
        at android.app.servertransaction.TransactionExecutor.executeCallbacks(TransactionExecutor.java:108)
        at android.app.servertransaction.TransactionExecutor.execute(TransactionExecutor.java:68)
        at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1808)
        at android.os.Handler.dispatchMessage(Handler.java:106)
        at android.os.Looper.loop(Looper.java:193)
        at android.app.ActivityThread.main(ActivityThread.java:6669)
        at java.lang.reflect.Method.invoke(Native Method)
        at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:493)
        at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:858)
2020-05-14 11:48:31.971 26720-26720/com.cads.smartanchortest E/Capacitor/Console: File: http://localhost/main.js - Line 1265 - Msg: OAuth rejected

Capacitor version: `2.1.0`

Capacitor Doctor
Latest Dependencies:
  @capacitor/cli: 2.1.0
  @capacitor/core: 2.1.0
  @capacitor/android: 2.1.0
  @capacitor/electron: 2.1.0
  @capacitor/ios: 2.1.0

Installed Dependencies:
  @capacitor/electron not installed
  @capacitor/cli 2.0.0
  @capacitor/ios 2.0.0
  @capacitor/core 2.0.0
  @capacitor/android 2.0.0
[success] Android looking great! �

Library version: `2.0.0`

OAuth Provider: `Azure B2C`

Your Plugin Configuration

{
    appId: 'XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXX,
    authorizationBaseUrl: 'https://TENANT.b2clogin.com/tfp/TENANT.onmicrosoft.com/B2C_1_policy-signin-signup-web/oauth2/v2.0/authorize',
    accessTokenEndpoint: '',
    scope: 'https://XXXXXXX.onmicrosoft.com/TestApi4/demo.read',
    responseType: 'token',
    web: {
      redirectUrl: 'http://localhost:8100/'
    },
    android: {
      pkceEnabled: true,
      responseType: 'code',
      redirectUrl: 'com.cads.testapp://oauth/redirect',
      accessTokenEndpoint: 'https://TENANT.b2clogin.com/TENANT.onmicrosoft.com/B2C_1_policy-signin-signup-web',
      handleResultOnNewIntent: true,
      handleResultOnActivityResult: true
    },
    ios: {
      pkceEnabled: true,
      responseType: 'code',
      redirectUrl: 'com.cads.testapp://oauth',
      accessTokenEndpoint: 'https://TENANT.b2clogin.com/TENANT.onmicrosoft.com/B2C_1_policy-signin-signup-web',
    }
}

Notes:

I have checked the azure settings and I have configured the Custom Redirect URI to com.cads.testapp://oauth/redirect but still am facing this issue.

If I change the following:

{
...
handleResultOnNewIntent: true,
handleResultOnActivityResult: false
...
}

It opens the login page and redirects to the app but does not give any error, but it does not pass any parameter either

EDIT:
it seems that the redirect URI add a backslash before :
The redirect URI 'com.cads.testapp:\/\/oauth\/redirect' provided in the request is not registered for the client id

Has anyone came across this issue, or knows a way to fix this? Many thanks for the awesome plugin!

The text was updated successfully, but these errors were encountered:

moberwasserlechner · 2020-05-14T13:13:28Z

Have a look at #91. Try the proposed steps there to debug your problem. BR

loonix · 2020-05-14T13:24:06Z

@moberwasserlechner I did take a look an followed the steps in there (unless I missed something) but till the same problem. It seems a bit weird but I do get this on the error:
'com.cads.testapp:\/\/oauth\/redirect' which should be 'com.cads.testapp://oauth/redirect' that might be the issue but I am stuck and get around this. :(

fredbjork · 2020-05-14T15:39:40Z

Try this:

android: {
      pkceEnabled: true,
      responseType: 'code',
      redirectUrl: 'com.cads.testapp://oauth/redirect',
      accessTokenEndpoint: 'https://TENANT.b2clogin.com/TENANT.onmicrosoft.com/B2C_1_policy-signin-signup-web',
      handleResultOnNewIntent: true,
      handleResultOnActivityResult: true
    },

strings.xml:

<string name="custom_url_scheme">com.cads.testapp://oauth/redirect</string>

AndroidManifest:

<data android:scheme="com.cads.testapp" android:host="auth" />

build.gradle:

defaultConfig {
        // other stuff
        manifestPlaceholders = [
            "appAuthRedirectScheme": "com.cads.testapp"
        ]

Azure portal:

Include web app / web API: YES
Allow implicit flow: YES
Include native client: YES
Custom Redirect URI: com.cads.testapp://oauth/redirect

moberwasserlechner · 2020-05-14T16:25:34Z

@fredbjork

In your example you do not use the value reference from strings.xml in the your AndroidManifest.

Therefore changing the value in strings.xml should not be needed. Have you tried to remove it.

You have

<data android:scheme="com.cads.testapp" android:host="oauth" />

instead of

<data android:scheme="@string/custom_url_scheme" android:host="oauth" />

The strings.xml should include only the scheme. No context path like ://oauth/redirect. See Cap docs for changing the custom scheme

I'll try to clearify that in the README.

moberwasserlechner · 2020-05-14T16:32:06Z

@loonix Could you plz have a look at this README section I tried to clearify a few things based on this task and the input from @fredbjork

fredbjork · 2020-05-14T16:40:33Z

You are right, could probably just remove the value in strings.xml if you dont use it in AndroidManifest.

loonix · 2020-05-14T17:16:50Z

@moberwasserlechner made a comment on the change

@fredbjork thanks forsharing the code but it seems that has not made any change to me I still get that error unfortunately :(

loonix · 2020-05-14T19:38:27Z

I still haven't managed to get it to work but I have created an example of implementation of azure b2c, maybe its easier to see the code

https://github.com/loonix/capacitor-oauth2-azure-example

moberwasserlechner · 2020-05-14T20:44:45Z

The repo looks good. Everything is there, so I really don't know why it does not work.

fredbjork · 2020-05-14T21:22:59Z

Try to add "openid" (and "offline_access") to your scope string and add those permissions to your App. Then "Grant admin consent for tenant B2C".

loonix · 2020-05-14T21:44:01Z

@fredbjork will try that, what type of app did you register on azure?

fredbjork · 2020-05-14T23:10:24Z

https://docs.microsoft.com/en-us/azure/active-directory-b2c/tutorial-register-applications?tabs=applications

loonix · 2020-05-15T11:34:43Z

@fredbjork @moberwasserlechner many thanks for your help, it seems that it was a typo on theredirectUrl that triggered that, after looking closer that was the issue

@moberwasserlechner please feel free to link my capacitor example to your readme-file as it is working well

PS: the / escape I think it is due to the json encoding that outputs that to the terminal..

loonix · 2020-05-15T13:02:44Z

for anyone experiencing the issue BAD REQUEST just make sure you add the code in MainActivity.java

... Other imports
import com.byteowls.capacitor.oauth2.OAuth2ClientPlugin; // <-- this

public class MainActivity extends BridgeActivity {
  @Override
  public void onCreate(Bundle savedInstanceState) {
    super.onCreate(savedInstanceState);

    // Initializes the Bridge
    this.init(savedInstanceState, new ArrayList<Class<? extends Plugin>>() {{
      // Additional plugins you've installed go here
      // Ex: add(TotallyAwesomePlugin.class);
      add(OAuth2ClientPlugin.class); // <-- this
    }});
  }
}

moberwasserlechner · 2020-05-15T15:03:45Z

@loonix I'm glad you solved your config issue.

Don't get me wrong but I try to prevent such tasks with documentation in the README. So just one final question:

There was no bug in the plugin or in the documentation. If you had followed the Android section in the README and did not had the typo in your config everything would be fine?

loonix · 2020-05-15T18:22:39Z

The problem was not the specification (although it did helped when you added the paths for placing the changes in the right place) it was really a typo on azure configuration. Documentation looks good, I created a fresh repo just to be easier to isolate the issue I was having.

When I have the IOS version working as well I will update the code so it gets easier for someone else that comes across this.

Sorry for all the questions and thanks for the help from both.

moberwasserlechner · 2020-05-15T18:55:13Z

@loonix Thx for the answer and for the repo.

I linked it here and copied your config as another example for azure b2c.

PS: My comment was not meant to be offending in any kind. Your questions helped to make the docs more helpful, especially for devs, that are new to Capacitor and OAuth.
PSS: I keep this task open until you finish the iOS part and if you have questions please ask.

loonix · 2020-05-18T11:19:47Z

Hey, is your logout function working? I am trying and it seems that it does not work with Azure.
Is there any logout url we have to provide on the configs?

  onLogoutClick() {
    Plugins.OAuth2Client.logout(environment.oauth2Options)
      .then(() => sessionStorage.clear())
      .catch(reason => { console.error('OAuth logout failed', reason); });
  }

moberwasserlechner · 2020-05-18T17:52:36Z

The current logout function is not what you expect. It simply cleans any cached tokens but does not log you out of the provider. For that to work you would have to provide a logout url, which is not supported (yet).

But you can create a new feature request task and I try to include that in one of the upcoming releases, but I can't give you a timeline.

moberwasserlechner · 2020-05-27T09:13:12Z

@loonix Is this issue ready to close? The logout feature request got its own task. Did you had any issues on iOS?

loonix · 2020-05-28T08:32:06Z

I still haven't tested, but feed free to close it, I will reopen if there is an issue. Thanks

moberwasserlechner · 2020-05-28T09:07:44Z

But could you plz open a new issue in case of a iOS problem. With all the discussion in this one it is would be hard to keep track of the new problem. thx

moberwasserlechner added the support label May 14, 2020

moberwasserlechner added the android label May 14, 2020

loonix mentioned this issue May 14, 2020

Azure B2C #91

Closed

moberwasserlechner added a commit that referenced this issue May 15, 2020

docs(): Add another b2c example #96

89c14b4

moberwasserlechner added the Provider: Azure label May 16, 2020

loonix mentioned this issue May 19, 2020

Feat: Logout Funtion & URL #97

Open

moberwasserlechner closed this as completed May 28, 2020

DoctorsInTech mentioned this issue Jul 5, 2020

Bug: Cannot open azure B2C log in page on android because of Caching #108

Open

pksnz mentioned this issue Jul 1, 2021

Deep Linking on Android is not working loonix/capacitor-oauth2-azure-example#3

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Azure B2C - redirect uri provided in the request is not registered for the client id #96

Azure B2C - redirect uri provided in the request is not registered for the client id #96

loonix commented May 14, 2020 •

edited

Loading

moberwasserlechner commented May 14, 2020

loonix commented May 14, 2020 •

edited

Loading

fredbjork commented May 14, 2020

moberwasserlechner commented May 14, 2020

moberwasserlechner commented May 14, 2020

fredbjork commented May 14, 2020 •

edited

Loading

loonix commented May 14, 2020

loonix commented May 14, 2020

moberwasserlechner commented May 14, 2020 •

edited

Loading

fredbjork commented May 14, 2020

loonix commented May 14, 2020

fredbjork commented May 14, 2020

loonix commented May 15, 2020 •

edited

Loading

loonix commented May 15, 2020

moberwasserlechner commented May 15, 2020 •

edited

Loading

loonix commented May 15, 2020

moberwasserlechner commented May 15, 2020

loonix commented May 18, 2020 •

edited

Loading

moberwasserlechner commented May 18, 2020 •

edited

Loading

moberwasserlechner commented May 27, 2020

loonix commented May 28, 2020

moberwasserlechner commented May 28, 2020

Azure B2C - redirect uri provided in the request is not registered for the client id #96

Azure B2C - redirect uri provided in the request is not registered for the client id #96

Comments

loonix commented May 14, 2020 • edited Loading

Description

Steps

Capacitor version: 2.1.0

Library version: 2.0.0

OAuth Provider: Azure B2C

Your Plugin Configuration

Notes:

If I change the following:

moberwasserlechner commented May 14, 2020

loonix commented May 14, 2020 • edited Loading

fredbjork commented May 14, 2020

moberwasserlechner commented May 14, 2020

moberwasserlechner commented May 14, 2020

fredbjork commented May 14, 2020 • edited Loading

loonix commented May 14, 2020

loonix commented May 14, 2020

moberwasserlechner commented May 14, 2020 • edited Loading

fredbjork commented May 14, 2020

loonix commented May 14, 2020

fredbjork commented May 14, 2020

loonix commented May 15, 2020 • edited Loading

loonix commented May 15, 2020

moberwasserlechner commented May 15, 2020 • edited Loading

loonix commented May 15, 2020

moberwasserlechner commented May 15, 2020

loonix commented May 18, 2020 • edited Loading

moberwasserlechner commented May 18, 2020 • edited Loading

moberwasserlechner commented May 27, 2020

loonix commented May 28, 2020

moberwasserlechner commented May 28, 2020

loonix commented May 14, 2020 •

edited

Loading

Capacitor version: `2.1.0`

Library version: `2.0.0`

OAuth Provider: `Azure B2C`

loonix commented May 14, 2020 •

edited

Loading

fredbjork commented May 14, 2020 •

edited

Loading

moberwasserlechner commented May 14, 2020 •

edited

Loading

loonix commented May 15, 2020 •

edited

Loading

moberwasserlechner commented May 15, 2020 •

edited

Loading

loonix commented May 18, 2020 •

edited

Loading

moberwasserlechner commented May 18, 2020 •

edited

Loading