AADSTS7000218: The request body must contain the following parameter

[bkievitk-gozamm]

Bug Report

Using basically the same code as #21814, but in cred.GetToken, we are getting:

{
"error": "invalid_client",
"error_description": "AADSTS7000218: The request body must contain the following parameter: 'client_assertion' or 'client_secret'. Trace ID: <...> Correlation ID: <...> Timestamp: 2024-02-14 02:40:29Z",
"error_codes": [
7000218
],
"timestamp": "2024-02-14 02:40:29Z",
"trace_id": "<...>",
"correlation_id": "<...>",
"error_uri": "https://login.microsoftonline.com/error?code=7000218"
}

We have "Allow public client flows" enabled as a Web configured app.

[chlowell]

Does your application have http://localhost registered as a redirect URI for "mobile and desktop applications"? Entra considers applications having only a "web" redirect URI to be confidential clients i.e., it requires them to authenticate with a secret.

[github-actions]

Hi @bkievitk-gozamm. Thank you for opening this issue and giving us the opportunity to assist. To help our team better understand your issue and the details of your scenario please provide a response to the question asked above or the information requested above. This will help us more accurately address your issue.

[github-actions]

Hi @bkievitk-gozamm, we're sending this friendly reminder because we haven't heard back from you in 7 days. We need more information about this issue to help address it. Please be sure to give us your input. If we don't hear back from you within 14 days of this comment the issue will be automatically closed. Thank you!