Azure B2C - redirect uri provided in the request is not registered for the client id

[loonix]

Description

Hi guys, I am able to login using the web configs but when I try to login on android it seems that it is not working for me, would be great if someone can give me some help with this.

Steps

1. Open emulator with app
2. Click Login
3. Accesses the login page (azure)
4. Automatically returns to the app
5. Throws an error

Chrome Inspector:

main.js:1265 OAuth rejected Error: ERR_GENERAL
    at Object.fromNative (capacitor-runtime.js:226)
    at <anonymous>:1:18

Android Studio:

2020-05-14 11:48:31.958 26720-26720/com.cads.testapp E/Capacitor/Plugin: ERR_GENERAL
    AuthorizationException: {"type":1,"code":1008,"error":"redirect_uri_mismatch","errorDescription":"AADB2C90006: The redirect URI 'com.cads.testapp:\/\/oauth\/redirect' provided in the request is not registered for the client id 'XXXXXXXX-XXXXXXX-XXXXXXX'.\r\nCorrelation ID: XXXXX-XXXXXX-XXXXXX\r\nTimestamp: 2020-05-14 10:48:30Z\r\n"}
        at com.byteowls.capacitor.oauth2.OAuth2ClientPlugin.handleAuthorizationRequestActivity(OAuth2ClientPlugin.java:333)
        at com.byteowls.capacitor.oauth2.OAuth2ClientPlugin.handleOnActivityResult(OAuth2ClientPlugin.java:321)
        at com.getcapacitor.Bridge.onActivityResult(Bridge.java:770)
        at com.getcapacitor.BridgeActivity.onActivityResult(BridgeActivity.java:212)
        at android.app.Activity.dispatchActivityResult(Activity.java:7454)
        at android.app.ActivityThread.deliverResults(ActivityThread.java:4353)
        at android.app.ActivityThread.handleSendResult(ActivityThread.java:4402)
        at android.app.servertransaction.ActivityResultItem.execute(ActivityResultItem.java:49)
        at android.app.servertransaction.TransactionExecutor.executeCallbacks(TransactionExecutor.java:108)
        at android.app.servertransaction.TransactionExecutor.execute(TransactionExecutor.java:68)
        at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1808)
        at android.os.Handler.dispatchMessage(Handler.java:106)
        at android.os.Looper.loop(Looper.java:193)
        at android.app.ActivityThread.main(ActivityThread.java:6669)
        at java.lang.reflect.Method.invoke(Native Method)
        at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:493)
        at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:858)
2020-05-14 11:48:31.971 26720-26720/com.cads.smartanchortest E/Capacitor/Console: File: http://localhost/main.js - Line 1265 - Msg: OAuth rejected

Capacitor version: 2.1.0

Capacitor Doctor
Latest Dependencies:
  @capacitor/cli: 2.1.0
  @capacitor/core: 2.1.0
  @capacitor/android: 2.1.0
  @capacitor/electron: 2.1.0
  @capacitor/ios: 2.1.0

Installed Dependencies:
  @capacitor/electron not installed
  @capacitor/cli 2.0.0
  @capacitor/ios 2.0.0
  @capacitor/core 2.0.0
  @capacitor/android 2.0.0
[success] Android looking great! �

Library version: 2.0.0

OAuth Provider: Azure B2C

Your Plugin Configuration

{
    appId: 'XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXX,
    authorizationBaseUrl: 'https://TENANT.b2clogin.com/tfp/TENANT.onmicrosoft.com/B2C_1_policy-signin-signup-web/oauth2/v2.0/authorize',
    accessTokenEndpoint: '',
    scope: 'https://XXXXXXX.onmicrosoft.com/TestApi4/demo.read',
    responseType: 'token',
    web: {
      redirectUrl: 'http://localhost:8100/'
    },
    android: {
      pkceEnabled: true,
      responseType: 'code',
      redirectUrl: 'com.cads.testapp://oauth/redirect',
      accessTokenEndpoint: 'https://TENANT.b2clogin.com/TENANT.onmicrosoft.com/B2C_1_policy-signin-signup-web',
      handleResultOnNewIntent: true,
      handleResultOnActivityResult: true
    },
    ios: {
      pkceEnabled: true,
      responseType: 'code',
      redirectUrl: 'com.cads.testapp://oauth',
      accessTokenEndpoint: 'https://TENANT.b2clogin.com/TENANT.onmicrosoft.com/B2C_1_policy-signin-signup-web',
    }
}

Notes:

I have checked the azure settings and I have configured the Custom Redirect URI to com.cads.testapp://oauth/redirect but still am facing this issue.

If I change the following:

{
...
handleResultOnNewIntent: true,
handleResultOnActivityResult: false
...
}

It opens the login page and redirects to the app but does not give any error, but it does not pass any parameter either

EDIT:
it seems that the redirect URI add a backslash before :
The redirect URI 'com.cads.testapp:\/\/oauth\/redirect' provided in the request is not registered for the client id

Has anyone came across this issue, or knows a way to fix this? Many thanks for the awesome plugin!

[moberwasserlechner]

Have a look at #91. Try the proposed steps there to debug your problem. BR

[loonix]

@moberwasserlechner I did take a look an followed the steps in there (unless I missed something) but till the same problem. It seems a bit weird but I do get this on the error:
'com.cads.testapp:\/\/oauth\/redirect' which should be 'com.cads.testapp://oauth/redirect' that might be the issue but I am stuck and get around this. :(

[fredbjork]

Try this:

android: {
      pkceEnabled: true,
      responseType: 'code',
      redirectUrl: 'com.cads.testapp://oauth/redirect',
      accessTokenEndpoint: 'https://TENANT.b2clogin.com/TENANT.onmicrosoft.com/B2C_1_policy-signin-signup-web',
      handleResultOnNewIntent: true,
      handleResultOnActivityResult: true
    },

strings.xml:

<string name="custom_url_scheme">com.cads.testapp://oauth/redirect</string>

AndroidManifest:

<data android:scheme="com.cads.testapp" android:host="auth" />

build.gradle:

defaultConfig {
        // other stuff
        manifestPlaceholders = [
            "appAuthRedirectScheme": "com.cads.testapp"
        ]

Azure portal:

Include web app / web API: YES
Allow implicit flow: YES
Include native client: YES
Custom Redirect URI: com.cads.testapp://oauth/redirect

[moberwasserlechner]

@fredbjork

In your example you do not use the value reference from strings.xml in the your AndroidManifest.

Therefore changing the value in strings.xml should not be needed. Have you tried to remove it.

You have

<data android:scheme="com.cads.testapp" android:host="oauth" />

instead of

<data android:scheme="@string/custom_url_scheme" android:host="oauth" />

The strings.xml should include only the scheme. No context path like ://oauth/redirect. See Cap docs for changing the custom scheme

I'll try to clearify that in the README.

[moberwasserlechner]

@loonix Could you plz have a look at this README section I tried to clearify a few things based on this task and the input from @fredbjork

[fredbjork]

You are right, could probably just remove the value in strings.xml if you dont use it in AndroidManifest.

[loonix]

@moberwasserlechner made a comment on the change

@fredbjork thanks forsharing the code but it seems that has not made any change to me I still get that error unfortunately :(

[loonix]

I still haven't managed to get it to work but I have created an example of implementation of azure b2c, maybe its easier to see the code

https://github.com/loonix/capacitor-oauth2-azure-example

[moberwasserlechner]

The repo looks good. Everything is there, so I really don't know why it does not work.

[fredbjork]

Try to add "openid" (and "offline_access") to your scope string and add those permissions to your App. Then "Grant admin consent for tenant B2C".

[loonix]

@fredbjork will try that, what type of app did you register on azure?

[fredbjork]

https://docs.microsoft.com/en-us/azure/active-directory-b2c/tutorial-register-applications?tabs=applications