oauth2错误AADSTS90014:请求正文必须包含以下参数：“grant_type”

Question

从Windev中的开发来看，我使用OAuth2.0进行授权，以便从用户那里访问outlook邮件。

应用程序是在https://apps.dev.microsoft.com注册的，没有隐式工作流。用户输入凭据后，将返回授权代码。对于新代码，通过HTTP Post命令请求承载令牌。

到目前为止，一切都很好。

只是响应给出了一条对我来说毫无意义的错误消息。

m_sHTTPUrl = "client_id=" + m_sClientID + "&client_secret=" ...
    + m_sClientSecret ...
    + "&redirect_uri=" + m_sRedirectURL + "&code=" + m_sAuthToken ...
    + "&grant_type=authorization_code"
m_sHTTPres = ""
LogLocalFile("GetAccessToken - " + m_sTokenURL + " // " + m_sHTTPUrl) 

cMyRequest is httpRequest
cMyRequest..Method = httpPost
cMyRequest..URL = m_sTokenURL
cMyRequest..ContentType = "application/x-www-form-urlencoded"
cMyRequest..Header["grant_type"] = "authorization_code"
cMyRequest..Header["code"] = m_sAuthToken
cMyRequest..Header["client_id"] = m_sClientID
cMyRequest..Header["client_secret"] = m_sClientSecret
cMyRequest..Header["scope"] = m_sScope
cMyRequest..Header["redirect_uri"] = m_sRedirectURL
//cMyRequest..Content = m_sHTTPUrl
cMyResponse is httpResponse = HTTPSend(cMyRequest)
m_sHTTPres = cMyResponse.Content

GetAccessToken - https://login.microsoftonline.com/common/oauth2/v2.0/token // grant_type=authorization_code
&code=xxxxxxx
&scope=openid+offline_access+User.Read+Email+Mail.Read+Contacts.Read
&redirect_uri=http://localhost/
&client_id=xxxxxxx
&client_secret=xxxxxxx

GetAccessToken - error = invalid_request
GetAccessToken - error_description = AADSTS90014: The request body must contain the following parameter: 'grant_type'.

Answer 1

您不应该在params或header中发送grant_type。那些应该在身体params中发送，然后只有它才会工作。

URL:https://login.microsoftonline.com/common/oauth2/v2.0/tokenclient_id、scope和redirect_uri可以作为查询params发送。其中asgrant_type、code和client_secret应在正文参数中发送。

grant_type:authorization_code, 
code: {code you got from the authorization step}, 
client_secret: ****