Microsoft oauth app consent prompt requiring tenant admin approval workflow

Xon

Well-known member
Affected version
2.3.9
When creating an oauth token against a microsoft account, a tenant can be configured to require approval for an oauth session with "risky" scopes.

XF's oauth flow barfs on this and forces a restart and new consent request. Basically, there is a step between the oauth token being request and it being granted that can take upto a week!
 
Back
Top Bottom